Cyber Security & Cloud Podcast

CSCP S4EP01 - Travis McPeak - Paved Road from Netflix to modern startups

Sep 18, 2023

Travis McPeak, a security expert with experience at Netflix and other tech giants, talks about creating a secure cloud infrastructure. He discusses the 'paved road' concept from Netflix, the challenges of security at small organizations, and the importance of DevSecOps. Travis emphasizes shared responsibility between developers and security ops, aiming to simplify security practices for modern startups.

00:38

Creator website

Episode guests

Travis McPeak

AI Summary

AI Chapters

Episode notes

Podcast summary created with Snipd AI

Quick takeaways

Developers should embrace security responsibilities in the software development lifecycle.

Implementing 'paved roads' for cloud infrastructure can simplify resource management and ensure best practices are followed.

Deep dives

Shift Left in Security Mindset and Empowering Developers

Developers are increasingly expected to own security in the software development lifecycle. The complexity of modern security domains requires empowering developers with tools to handle security effectively. Teams should focus on providing developers with contextual guidance and resources to make security a seamless part of their workflow.

Intro

2min

Evolution of Cybersecurity and Empowering Developers for Security

2min

The Importance of 'Paved Road' Solutions in Simplifying Security for Developers

13min

Efficiency in Triage and Building with Redirected Resources

2min

Shifting Left: Paving the Road for Security

18min

Positive Message for the Security Community and Teaser for Paved Road Product

3min

Travis McPeak is a security generalist with over a decade of experience working at several companies including Databricks, Netflix, IBM, HP, and Symantec. He’s the Co-Founder and CEO of Resourcely, whose goal is to create a paved road to secure, efficient, and easy to manage cloud infrastructure. In this conversation, Travis shares his biggest takeaway from working at Netflix, the problem with overusing JIRA, and the importance of making security a shared responsibility between developers and security ops.

The episode is brought to you by Phoenix Security; get in control of your vulnerabilities from code to cloud with the power of Phoenix. ACT Now on the most important vulnerabilities and reduce your exposure to modern attacks. See it for yourself. Go to https://phoenix.security/request-a-demo/ for a free 14-day licence.

0:00 Introduction

1:26 Travis’ background

2:10 View of industry

4:00 Netflix “paved road”

5:20 Lemur

8:00 Security at small orgs

11:36 Reactive security with JIRA

14:35 Measuring security

18:16 Inflection point

20:48 Demystifying the paved road

24:30 DevSecOps

30:40 Unifying the objective, shared responsibility