Security BSides San Francisco Courses

Career Village - Tales from a Hiring Manager

Gain valuable insights on interviewing dos and don'ts from an experienced hiring manager's perspective, enhancing your chances of success in the job market.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

HSMs in Plain Envelopes - A Code Signing Story

Explore the challenges of code signing for open source developers, addressing outdated mechanisms and high costs while examining the complexities and frustrations involved in the process.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Security Hiring Trends

Explore current security hiring trends, including top-paying industries, in-demand skills, and strategies for landing interviews and securing job offers in the evolving tech landscape.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Hunting Supply Chain Threats Using Anomaly Detection

Explore a case study on detecting supply chain threats through anomaly detection in Cloud API logs, offering insights into advanced cybersecurity techniques.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

How Do You Trust Your Open Source Software?

Explore OpenSSF Scorecard, an automated tool assessing software security heuristics. Learn how it evaluates dependencies and identifies areas for improving security posture in open source projects.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Level Up Your Career - A Panel on Staff+ Engineering

Expert panel discusses transitioning from Senior to Staff+ engineering in security, offering insights on career advancement and answering audience questions about high-level roles in cybersecurity.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Certificate Transparency Logs - Roadmaps to Riches or Ruin?

Explore the dual nature of Certificate Transparency Logs in Web PKI: their role in ensuring certificate authenticity and potential misuse by malicious actors for reconnaissance.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

How Segment Proactively Protects Customer's API Keys

Discover Segment's innovative approach to safeguarding API keys, addressing the critical issue of secret leaks on GitHub and enhancing overall security for user data and actions.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Building an Endpoint Security Program from Scratch

Learn to develop a comprehensive endpoint security program to protect your organization's internal resources and data from potential threats and compromised devices.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Lessons Learned While Building a Privacy Operations Center at Headspace Health

Insights on creating a Privacy Operations Center in digital healthcare, addressing global regulations and overcoming challenges in data protection and compliance.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Secret Hunting

Discover techniques for finding, rotating, and safely managing secrets in applications. Learn best practices for secure secret storage and handling compromised credentials.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

To Normalized Logs, and Beyond - Building a Threat Detection Platform from Scratch

Deep dive into building a scalable, lean threat detection pipeline. Learn automation techniques for data ingestion, detections-as-code, and filtering to create a serverless platform for effective threat detection.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The Expanding Universe of Cyber Threats

Explore cyber threat intelligence as a solution for managing the rapidly expanding threat landscape, prioritizing threats, and providing actionable insights to decision-makers in enterprise security.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Sandboxes All the Way Down - A Hitchhiker's Guide to Platform Containment

Explore modern sandboxes and isolation primitives for enhanced security. Learn when and how to use containment tools, with practical insights for immediate implementation.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

The Best Defense is a Great Offense - Leveraging Automated OffSec to Build Proactive C2 Detections

Learn to develop proactive Command & Control (C2) threat detections using automated offensive security techniques. Explore push-button infrastructure for simulating complex attacker behaviors and generating high-fidelity signals.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk