The Psychology of Security Automation with Jason Chan (VP, Cloud Security at Netflix)

Historically, relationships between developers and security teams have been prickly, problematic, and painful. Security teams may see developers as careless and ignorant of risk, while developers may look at security teams as dogmatic and inflexible hurdles to productivity. Collective histories of bad experiences on both sides of this partnership lead to low trust, poor working relationships, and ultimately more security problems.

Can technologies and approaches like cloud, APIs, self-service, and automation change the trajectory of the developer/security relationship and lead to better outcomes – including both happier developers and more secure systems? In this talk, we’ll explore how security teams can use thoughtful tools and automation to improve their relationships with development teams while creating a more secure and manageable environment. Topics covered will include Netflix’s approach to IAM entity management, ELB and certificate management, and general security configuration monitoring.