OWASP Toronto - June 2018 Event

Hello everyone,

I am please to announce our next OWASP Toronto chapter event. This time, we will have Brian Andrzejewski (@DevSecOpsGeer) join us remotely for a talk on container security.

Please note that this will be a remote presentation. We will have Brian join us remotely through video conferencing.

As usual, space is limited, so please confirm your attendance on our Meetup event pages (see links below).

Thanks,
Yuk Fai

Yuk Fai Chan
OWASP Toronto Chapter

---
Date/Time: June 12, 2018, 6:00 PM to 8 PM EDT
Location: Suite 500, 257 Adelaide St. W., Toronto, ON
Event page: https://www.meetup.com/OWASP-Toronto/events/251502769/

How to stop worrying about Application Container Security

Containers make it easier to deploy the applications that drive business value, but also profoundly challenge existing security models. Learn from our journey as a security team that went from not knowing what containers were to championing their adoption in our production sensitive information workloads over traditional DevOps application deployments.

• About Us
• Our Application & Security Challenges
• Our Container Journey
• Building an Container Ecosystem
• Learning Secure Application Containers
• Benefits for DevOps and Security
• Our Container Security Maturity Model
• What’s Next

Presenter: Brian Andrzejewski (@DevSecOpsGeer)

Brian was the lead Information Security Engineer in the CyberDefense Branch at the United States Customs and Immigration Services (USCIS). He led, engineered, and architected several of USCIS’s security efforts and represented USCIS as a hands-on SME in several working groups within DHS and Federal government on DevSecOps, Application Security, Cloud Migration & Security, Container Security, and CyberDefense operations best practices.

Prior to USCIS, Brian brings his prior 17+ years of professional experiences in information security, risk management, IT Operations, system development & administration, & DFIR from the Department of Defense, healthcare, commercial, and academic sectors. He was a prior DoD SME representative in U.S. cybersecurity workforce development programs and operationalized machine-speed cyber threat information sharing between the five U.S. National Cyber Centers. He remains passionate about cybersecurity workforce development and information security education with non-profits and security researchers.