Julian

Security Engineer

[French @nfFrenchie]

🚀 I'm Hiring: Founding Engineer!

Huge problem space, exciting tech, opportunity for huge ownership of the solution.

#golang, Software Supply Chain, #k8s, #SBOM & #SLSA

More info here: https://t.co/TYyGt6rAQn

#BuildTrustedSoftware

[shubs @infosec_au]

Recently @Rhynorater sparked a discussion about exploiting blind SSRFs. At @assetnote, we've collected some information together and have created a Glossary of Blind SSRF Chains which can be found here: https://t.co/ziGHgBEXKL - we hope people can use it as a reference!

[Clint Gibler @clintgibler]

📚 tl;dr sec #39
* @FrenzChris The need for evidence based security
* @madhuakula slides/training and #Kubernetes Goat
* #NahamCon slides
* @ajinabraham NodeJSScan v4
* @Doyensec InQL Scanner v2
* @0xdabbad00 denial of wallet attacks

https://t.co/tCUokUfRF1

[Tanya Janca | Shehackspurple @shehackspurple]

Please visit my new site, https://t.co/tP7CoHTfk8, a learning platform dedicated to teaching Application Security, DevSecOps, and Cloud Security.

[Julian @JulianBerton]

@securityfu Let me know what you think of Listo if you get a chance to play with it :)

[Julian @JulianBerton]

After almost 5 years it’s hard to accept that Friday was my last day at SEEK :( It was a pleasure working with an amazing team, am very grateful for the opportunity and excited to start my next journey that awaits in San Francisco!

[Julian @JulianBerton]

@vanderaj Thanks @vanderaj, will be doing AppSec at @Cruise! Assuming the visa goes though ok. Hopefully see you a little more also :)

[Julian @JulianBerton]

@liamosaur Thanks mate, appreciate it :)

[Julian @JulianBerton]

@_sarahyo @BSidesSF Just missing it unfortunately :( Will be there late March!

[Julian @JulianBerton]

@travismcpeak Would have been great to work together! At least i'll be seeing you a bit more often now :)

[Julian @JulianBerton]

@snyff Not sure yet :(

[Julian @JulianBerton]

P.S I was super excited that the team and I managed to open source Listo during my last week! A tool designed around questionnaires and checklists to help engineers build more robust and secure software systems.

https://t.co/6KYUltvcLb

[Julian @JulianBerton]

However, it has been great to watch the culture improve and I'm confident that Liam Connolly and his extremely talented team will continue to improve security at SEEK into the future.

[oliver.mannion @tweeshan]

Great post by @JulianBerton about how @SEEK_Geek scales security, architecture and reliability advice using automated checklists.

It's also open-source ❤️

https://t.co/UsteXDRobV

[Clint Gibler @clintgibler]

tl;dr sec has over 1,000 subscribers! 📈🚀😱

Thank you for taking the time to read it, and I really appreciate all the kind words people have said 🙏

If you're not currently a subscriber & want to see what the fuss is about, you can check it out here:

https://t.co/iekVKzgulN

[Clint Gibler @clintgibler]

Over the past few years I've spent 100s (1000s?) of hours studying how companies have scaled their security.

Here are my @AppSecCali slides that distill what I've learned- the big, scalable, systematic wins that measurably improve your security posture.

https://t.co/32UNf5dgJF

[Clint Gibler @clintgibler]

I watched all 44 @owasp @AppSecCali 2019 talks (~32 hours of video) and wrote detailed summaries for you 📚

Learn about #DevSecOps, scaling security, threat modeling, building a security program, & more.

https://t.co/KpMYHZvsf1

[Julian @JulianBerton]

@centur Soon... No eta just yet.