Life of a DevSecOps Engineer (w/ Aras "Russ" Memisyazici)
Ғылым және технология
Russ Memisyazici is a DevSecOps engineer and cloud architect with 30+ years experience in IT and cyber security. From coaching US CyberPatriot teams to building the Virginia Cyber Range, he's got quite the colorful career.
By-the-way, it’s pronounced: my-mish-yah-zuh-juh.
In this interview, Russ shares his knowledge on:
- Cloud risks
- Future cloud technologies
- Thoughts on cyber certifications
- His personal journey in cyber security.
There's also advice for starting a DevSecOps career too!
DevSecOps combines cyber security with traditional DevOps to help developers deliver secure apps. As a DevSecOps engineer, you’ve got to be well-versed in both software development, IT operations, and cyber security. Whether it’s application security assessments, cloud deployments, or coding, you need a wide range of skills. It’s system administration on steroids.
A common DevSecOps workflow would be defining your entire infrastructure and deployment cycle as code. Then you would automate the tests, security assessment, and deployment with a CICD tool like Jenkins.
DevSecOps personnel are very sought after in the startup world. When it comes to building scalable infrastructure and deploying apps, DevSecOps folks are commandos of the tech world. It’s a fast-moving domain, with terminology and technology changing from one day to the next. Soon the term “DevSecOps” might even be replaced with “GitOps.”
But the most important thing that Russ highlights is to focus on the basics. Fundamentals like networking, scripting, or system administration, don’t change as much. Fancy new technologies that are coming out are all built on top of these skills. But they do take reading books and good old-fashioned keyboarding to acquire.
00:00 Introduction - Aras "Russ" Memisyazici
01:36 What is DevSecOps?
04:10 Why Is DevSecOps Critical for Cybersecurity?
07:24 Role of DevSecOps in Securing Infrastructure
10:04 What Technologies and Skills are Important for DevSecOps?
13:04 How Much Does DevSecOps Pay?
15:47 Roles & Opportunities for DevSecOps
17:25 Books and Resources for Learning DevSecOps
23:20 What is the Cloud?
27:57 What Risks are Associated with the Cloud?
32:22 What's the Future of Cloud Technology?
37:0 How Important Are Cybersecurity Certifications?
44:29 What Is the Value of Cybersecurity Programs?
50:10 What are Shortcomings of Cyber Education Currently?
55:50 Russ's Personal Cybersecurity Journey
1:05:58 Get in Touch with Russ Memisyazici
LIKE and SUBSCRIBE
---- Resources ----
Phoenix Project, Gene Kim
www.amazon.com/Phoenix-Projec...
The DevOpSec Book, Jim Bird
www.oreilly.com/library/view/...
Hands-on Security in DevOps, Tony Hsiang-Chih Hsu
www.amazon.com/Hands-Security...
Agile Application Security, Laura Bell
www.amazon.com/Agile-Applicat...
Site Reliability Engineering (SRE) Workbook,
sre.google/workbook/table-of-...
The Site Reliability Workbook, O’Reilly
www.oreilly.com/library/view/...
#DevSecOps #DevOps #Cyberspatial
Пікірлер: 86
He guided an entire generation of engineers, millions of videos on internet but this one video is enough to guide the whole humanity on education system, computer science and security. I wish he was my instructor and trainer.
Highly enjoyed this interview. I'm going to listen to this again.
I am officially in love with Aras "Russ" Memisyazici, his passion about the subject is clearly visible and enjoyable to follow, hope I can find more content that involves him.
this channel us underrated, keep up the awesome work!
Wow just fell in love with the grace in explaining the concepts so nicely.Thank you for such nice video
Good interviewing, you ask relevant questions then let the interviewee answer without interrupting. Russ had a lot to say and was interesting and entertaining.
This was really helped me and give positive energy. Thank you!
This is gold!!! I enjoyed every minute of this!
Awesome: Indeed, being passionate and enthusiastic about what we convey to students is the key - You are a passionate! Thrilled to follow your talk,
Awesome interview. Russ explained the IT stuffs by providing simple out IT examples. Thanks for the video!.
When he said "the concept of self-healing... just really means restarting the service... let's turn it on and off again" LOL I knew this is someone I want to listen to. He's gonna cut the BS and just speak facts.
Once again thanks for informative interview. Much appreciated !
@Cyberspatial
3 жыл бұрын
You're welcome :)
Awesome content as always! Russ is so passionate. His students are lucky!
@Cyberspatial
3 жыл бұрын
Indeed! 🙌
Keep uploading such educational videos. Really appreciate your effort
@Cyberspatial
3 жыл бұрын
Awesome. Thank You!
This is one of the best interviews I’ve come across. This guy seriously “gets it” and explains everything very well. I tell my clients a lot of this stuff and will use some examples provided to further cement the topics. Wonderful stuff!
@Cyberspatial
3 жыл бұрын
Share this with your clients! Thank you!
Much needed topic. Thanks man!
@Cyberspatial
3 жыл бұрын
You're Welcome!
Superb interview!
Inspiring! Thanks a lot
Fascinating interview, instant Like. Thanks!
@Cyberspatial
3 жыл бұрын
Thanks for the support!
Awesome! That guy just gave me a heck of motivation!
Man this content is helping ❤️❤️
@Cyberspatial
3 жыл бұрын
For sure :)
sooper wisdom sharing interview.
Real expert in cybersecurity, great content and source of positive energy !
@Cyberspatial
3 жыл бұрын
Thanks so much!
This was really informative and helpful , thankyou so much
@Cyberspatial
3 жыл бұрын
You're welcome!
Thank you for interviewing Aras! I am also a Cloud and DevSecOps Architect and this is the BEST video on KZread that actually describes what DevSecOps is correctly. So sick of all other other videos and with self proclaimed thought leaders making it seem like DevSecOps is strictly about building CI/CD pipelines with a couple of AppSec steps, lol. That being said, I don't agree with his view that a degree is important, as it frankly just goes as deep as certifications in my view. It's experience that shows experience, and degrees don't prove experience. He obviously has bias (conflict of interest) since he makes part of his living as a part-time college professor.
Keep putting out the great content my guy
@Cyberspatial
3 жыл бұрын
For sure :)
Wooow This video is Awesome👏👏👏 I set goal for DevSecOps now which I really wanted to go... Prof is like "Ask me anything I have the answer" He started from basic now he is best what he doing... He also give knowledge which most of them won't do in IT industry.... Thanks a lot of this video helped me alot for further plan
@Cyberspatial
3 жыл бұрын
Great to hear! All the best on your journey :)
this guy explains stuff great
Candid but Awesome! 👍👍👍🤘
@Cyberspatial
3 жыл бұрын
Thank you!
nice content, that helped me alot I love it!
@Cyberspatial
3 жыл бұрын
Glad to hear!
In most of your interviews you ask them their opinion about cybersecurity certs, i totally get your point. I don't like them, although some of them, few of are quite decent per say and actually teach something, but the reason I don't like them is that they teaching people to realy on tools and giving them a false sense of expertise, and not to build and learn real hacking, although this is not formulated yet and it's hard and takes time to learn. Great video, keep it up!
@Cyberspatial
3 жыл бұрын
For sure! It's one of those highly opinionated topics that's nice to get everybody's perspective on. A simple yes/no is far too simple; there's always nuances and exceptions. The content that comes with certs is valuable for providing surface level knowledge and awareness. Beyond that, hands-on keyboard and experience over time is the real deal.
Great content👏🏼
@Cyberspatial
3 жыл бұрын
Thank You!
This is content 👌
This was 2 years ago, he was right AI is indeed scary
He gives me faith in schools again.
1:02:14 Back and forth and that's how IO works on HDD :) J/k but nice session! Was looking for DevSecOps material and found this one...
Hi dear.....I love you for posting this great video....it's more interesting than a movie. I'm watching this at 03:00 A.M. Indian Standard Time.
@Cyberspatial
3 жыл бұрын
Make sure to get sleep, otherwise you'll forget what you watched!
7:43 Iaas stands for infrastructure As A Service not as a code
Hi Cyberspatial! Can you make a video of VPNs? Questions about VPN: How much protection? How does it work with day to day usage (buying goods with VPN makes bank/PayPal alarms go off) and How can we protect our self :) Love All your videos, Please keep them coming! Thank you
@Cyberspatial
3 жыл бұрын
That's a great idea! There's a lot of voodoo and snake oil on VPNs so I think it's worth doing!
Can you please tell me what is the black wireless keyboard that you use on the introductions for your videos?
@Cyberspatial
3 жыл бұрын
AnnePro2
Dat guys is our messiah ! :D
❤️
@Cyberspatial
3 жыл бұрын
❤️
Are you using a Huawei Matebook D15?
@Cyberspatial
3 жыл бұрын
Macbook Pro.
When he says Bachelor's degree, does that have to be in IT or just a bachelor degree in general?
@Cyberspatial
Жыл бұрын
A degree is most beneficial if it is somehow related to your career field, but not absolutely necessary. Any degree is better than no degree at all as long as you have the prerequisite skills to add value in the job you are working.
@stormchaser419
Жыл бұрын
@@Cyberspatial I have 2 bachelor degrees in Business and Education and I am currently trying to break into the IT field and cybersecurity. My recruiter had an IT auditing job interview lined up but the company put those on hold until spring due to the economy I believe. I just want to know moving forward whether not having my bachelors in IT will be the albatross that may hold me back in this field. If it may even keep me in the future of getting that ONE opportunity between me and anthor candidate and it's a six figure job then what?
Can I study DevsecOp Without having IT background?
Russ.. the story of two solders is the best joke of the day.
Came for the value, Liked for the paint dry joke lol.
Adamın dibiii büyük siber savaşçı
@Cyberspatial
3 жыл бұрын
:)
@qumem18
3 жыл бұрын
@@Cyberspatial :)
I am a beginner where do I start from?
@Cyberspatial
3 жыл бұрын
Read the books he mentioned!
That...is a lot of heckin’ letters after his name. Holy shit. Edit: Also, “got hacked so bad because I set all the VLANs to trunk because I didn’t know any better and just wanted it to work”. Me, having finished the CCNA portion of the cybersecurity program I’m in: oh god no. No. No! NOOOOOOOOOOOOOOOOOO
@Cyberspatial
3 жыл бұрын
🤣 CCNA is a great crash course on networking though.
I'm almost sure that the video is dubbed, because the profs webcam is heavily cut, whereas yours isn't
@yourfellowhumanbeing2323
3 жыл бұрын
He is recording from his end, thats why. Feed yourself some thoughts XD
@Cyberspatial
3 жыл бұрын
Wouldn't it be amazing if it was? Multitrack recording.
@yourfellowhumanbeing2323
3 жыл бұрын
@@Cyberspatial yep
First comment here!
@Cyberspatial
3 жыл бұрын
Thanks for tuning in 🙌
the interviewer has more expressions delivered in one sentence than the actress had in the whole movie Mulan. I am distracted by his eyebrows that seem to have a life of its own
@Cyberspatial
3 жыл бұрын
😅
if you are abt cybersecurity , welcome to hell💥💥💥💥😍
promo sm