Security Courses

Security BSides San Francisco

What Does it Mean to Build a Proactive Security Culture in an Organization

Explores strategies that build a proactive security culture in an organization, alongside approaches that failed.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

When is a Vulnerability Not a Vulnerability? Overcoming the Inundation of Noisy Supply Chain Security Alerts

A security talk shows how teams can confidently ignore most noisy software supply chain vulnerability alerts and reshape their security workflows.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

What I Learned About Security Working Minimum Wage at Hollywood Video

A former video-store employee reflects on what constant theft taught him about practical security management.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Scalable Security - How to Win Friends and Not Burn Out Everyone

Lessons from scaling security processes while keeping coworkers on board and avoiding burnout.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

The State of Blockchain Security - 2023 Edition

An annual review of blockchain security examines major DeFi, exchange, and blockchain compromises alongside emerging trends and opportunities.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Overwatch - A Serverless Approach to Orchestrating Your Security Automation

Overwatch uses serverless security orchestration to reduce CI configuration sprawl and infrastructure upkeep for lean security teams.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Security Compliance as Code

Examines security compliance as code in the context of the burden frameworks such as SOC 2, ISO 27001, and PCI DSS place on engineering and operations teams.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Building an Endpoint Security Program from Scratch

Learn how to build an endpoint security program from scratch to reduce risks from compromised endpoints and protect organizational resources and data.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

First Security Hire - Building a Security Roadmap and Team from Scratch

Industry practitioners discuss how an early-stage company can establish its security roadmap, hire a team, and build a culture of cybersecurity.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Lost in Space - How to Navigate Corporate Security as an Engineer

A backend engineer’s lessons on moving into corporate security, navigating beyond engineering, and communicating across a company.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Launch Control - Automating a Security Baseline in the Cloud at Scale

A declarative, self-healing security baseline makes it possible to deploy cloud-native controls consistently across environments ranging from five to 500 accounts.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

NLP for Security Log Analysis - Learning to Crawl Before You Run

Explores how NLP embeddings can help detect insider threats in security logs.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Hiring and Interviewing as Security Engineers

A look at interviews from both sides, with ways to reduce hiring bias and tailor interviews to different security roles.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Gamify Security Best Practices to Scalably Improve Engineering Culture

A case study on gamifying security best practices to improve engineering culture and make security posture more observable.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Active Directory Abuse Primitives and Operation Security

Examines how adversaries chain Active Directory abuse primitives into attack paths, with demonstrations of four operations and ways to evade detection.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk