Larry Maccherone

DevSecOps Transformation at Contrast

[Contrast Security @contrastsec]

Not all apps are created equal, don’t mindlessly #ShiftLeft. #ShiftSmart instead. Check out Part 1 of @LMaccherone's Considered Harmful series as he highlights why shifting smart is the innovative approach in #AppSec: https://t.co/YVqCCh3ryA

[Larry Maccherone @LMaccherone]

My philosophy in under 2 minutes

[Help Net Security @helpnetsecurity]

Building resilience through DevSecOps - https://t.co/WA2PaxEQ3g - @contrastsec @CopadoSolutions @ProgressSW @LMaccherone @riedelinc @mtroester #DevSecOps #SoftwareDevelopment #CyberSecurity #netsec #security #InfoSecurity #CISO #ITsecurity #CyberSecurityNews #SecurityNews #video

[Contrast Security @contrastsec]

The 2023 @coissa Infosec Summit is just around the corner. Join us on Apr. 20 for a discussion with Contraster @LMaccherone on how to deliver a transformation blueprint for accomplishing the cultural shift to developer-centric application security. #COISSA https://t.co/ukGtCeMf37

[Larry Maccherone @LMaccherone]

https://t.co/QWurIPJQIn

[Contrast Security @contrastsec]

Join our DevSecOps Transformation Architect @LMaccherone at #DevOpsCon on Nov. 22 from 11:15 - 12:00pm Singapore Time as he discusses what true Shift-Left Developer-Centric Security means and how to "make a deal" with security so you're ready. Learn more: https://t.co/tPtNF2OOHz

[NetSPI @NetSPI]

What is #DevSecOps? It’s empowering your engineering teams to take ownership of the security of the products being built following the three ways of #DevOps. More from @contrastsec’s @LMaccherone on @AgntOfInfluence: https://t.co/XV1KOxVuRw

[Larry Maccherone @LMaccherone]

@plaugg @johanneslink @JoshuaKerievsky The only new detail that our qual research showed for high performing larger teams was that they had more specialists UX, Architect, and upwards of 1:1 ratio between dev and test. I believe this explains why larger teams had better quality but worse responsiveness 2/2

[Larry Maccherone @LMaccherone]

@plaugg @johanneslink @JoshuaKerievsky I did quantitative research of a body of data that included over 10,000 teams. We dug in qualitatively when the quant results made no sense. 1/

[Larry Maccherone @LMaccherone]

Great advice from a one of the best leaders I know!

[Nithya Ruff @nithyaruff]

It is not the hours you work, it is the positive impact you make, & the value you add. Are you working on the right priorities, looking at problems to solve, working smart, collaborating for leverage, and sharing your learnings? #Productivity

[Contrast Security @contrastsec]

Need a quick summary on what @LMaccherone talked about? Check out our blog 👉 https://t.co/fnv9m6qqs8

[Larry Maccherone @LMaccherone]

@johncutlefish @williamwong Yes. Trusted Advisor is the original but I didn’t know that until I published my algorithm for maximizing my version of the formula for DevSecOps. I heard it from someone at Rally Software who didn’t tell me where he learned it.

[NASA Webb Telescope @NASAWebb]

While the purpose of Webb’s latest image was to focus on a bright star and evaluate the alignment progress, Webb’s optics are so sensitive that galaxies and other stars can be seen in the background. Watch this video for an in-depth explanation of how the image was created!

[Larry Maccherone @LMaccherone]

@jezhumble Scary

[Larry Maccherone @LMaccherone]

It's not too late to register for my webinar discussing how to avoid the next zero-day in light of learnings from the Log4Shell kerfuffle last month. https://t.co/WMLtQQj57X #DevSecOps #CyberSecurity

[Larry Maccherone @LMaccherone]

@johncutlefish I think this just means that you aim for “warm candor” not “brutal honesty”

[John Miller @agileschools]

Some good questions to answer in crafting a team agreement:
“How do we make decisions?”
“If we fail to reach consensus, how do we move forward?”

[Larry Maccherone @LMaccherone]

@ankurkumarz I really need to update that. Thanks for the kind words and reposting.

[Troy Magennis @t_magennis]

Dramatic. Appropriately dramatic.

[Larry Maccherone @LMaccherone]

I'm excited to be presenting "The Future of Dev[Sec]Ops" tomorrow at 12:30am eastern US at OWASP 20th Anniversary Event. It's not too late to sign up! https://t.co/T0opZDxOKY @owasp #AppSec #DevSecOps #owasp @sched