Life of a DevSecOps Engineer (w/ Aras 'Russ' Memisyazici)

Russ Memisyazici is a DevSecOps engineer and cloud architect with 30+ years experience in IT and cyber security. From coaching US CyberPatriot teams to building the Virginia Cyber Range, he's got quite the colorful career.

By-the-way, it’s pronounced: my-mish-yah-zuh-juh.

In this interview, Russ shares his knowledge on:
- Cloud risks
- Future cloud technologies
- Thoughts on cyber certifications
- His personal journey in cyber security.

There's also advice for starting a DevSecOps career too!

DevSecOps combines cyber security with traditional DevOps to help developers deliver secure apps. As a DevSecOps engineer, you’ve got to be well-versed in both software development, IT operations, and cyber security. Whether it’s application security assessments, cloud deployments, or coding, you need a wide range of skills. It’s system administration on steroids.

A common DevSecOps workflow would be defining your entire infrastructure and deployment cycle as code. Then you would automate the tests, security assessment, and deployment with a CICD tool like Jenkins.

DevSecOps personnel are very sought after in the startup world. When it comes to building scalable infrastructure and deploying apps, DevSecOps folks are commandos of the tech world. It’s a fast-moving domain, with terminology and technology changing from one day to the next. Soon the term “DevSecOps” might even be replaced with “GitOps.”

But the most important thing that Russ highlights is to focus on the basics. Fundamentals like networking, scripting, or system administration, don’t change as much. Fancy new technologies that are coming out are all built on top of these skills. But they do take reading books and good old-fashioned keyboarding to acquire.

00:00 Introduction - Aras "Russ" Memisyazici
01:36 What is DevSecOps?
04:10 Why Is DevSecOps Critical for Cybersecurity?
07:24 Role of DevSecOps in Securing Infrastructure
10:04 What Technologies and Skills are Important for DevSecOps?
13:04 How Much Does DevSecOps Pay?
15:47 Roles & Opportunities for DevSecOps
17:25 Books and Resources for Learning DevSecOps
23:20 What is the Cloud?
27:57 What Risks are Associated with the Cloud?
32:22 What's the Future of Cloud Technology?
37:0 How Important Are Cybersecurity Certifications?
44:29 What Is the Value of Cybersecurity Programs?
50:10 What are Shortcomings of Cyber Education Currently?
55:50 Russ's Personal Cybersecurity Journey
1:05:58 Get in Touch with Russ Memisyazici

LIKE and SUBSCRIBE

----- Resources -----

Phoenix Project, Gene Kim

The DevOpSec Book, Jim Bird

Hands-on Security in DevOps, Tony Hsiang-Chih Hsu

Agile Application Security, Laura Bell

Site Reliability Engineering (SRE) Workbook,

The Site Reliability Workbook, O’Reilly

#DevSecOps #DevOps #Cyberspatial

[thesuperiorman]

When he said "the concept of self-healing... just really means restarting the service... let's turn it on and off again"
LOL I knew this is someone I want to listen to. He's gonna cut the BS and just speak facts.

[surendrabhagat]

Keep uploading such educational videos. Really appreciate your effort

[sultanqureshi]

He guided an entire generation of engineers, millions of videos on internet but this one video is enough to guide the whole humanity on education system, computer science and security. I wish he was my instructor and trainer.

[Kenny-ktlk]

Now i don't admire people's success but their hardwork and dedication they put to get were they wanna be. this is incredible, i feel inspired to learn and face those challenges, there’s no easy route, you must face a challenge which helps you to become stronger. I appreciate this content.

[sofiakim]

Awesome content as always! Russ is so passionate. His students are lucky!

[shaju]

if you are abt cybersecurity, welcome to hell💥💥💥💥😍

[sobc]

Highly enjoyed this interview. I'm going to listen to this again.

[NeilSearle]

Good interviewing, you ask relevant questions then let the interviewee answer without interrupting. Russ had a lot to say and was interesting and entertaining.

[ivaldirbatalha]

In most of your interviews you ask them their opinion about cybersecurity certs, i totally get your point.
I don't like them, although some of them, few of are quite decent per say and actually teach something, but the reason I don't like them is that they teaching people to realy on tools and giving them a false sense of expertise, and not to build and learn real hacking, although this is not formulated yet and it's hard and takes time to learn.

Great video, keep it up!

[hakanerdogan]

Real expert in cybersecurity, great content and source of positive energy !

[naveedpasha]

Wooow This video is Awesome👏👏👏 I set goal for DevSecOps now which I really wanted to go... Prof is like "Ask me anything I have the answer" He started from basic now he is best what he doing... He also give knowledge which most of them won't do in IT industry.... Thanks a lot of this video helped me alot for further plan

[davidgaliata]

This is one of the best interviews I’ve come across. This guy seriously “gets it” and explains everything very well.

I tell my clients a lot of this stuff and will use some examples provided to further cement the topics. Wonderful stuff!

[spartanthakur]

This was really informative and helpful, thankyou so much

[bitcode_]

this channel us underrated, keep up the awesome work!

[mohanrajloganathan]

Awesome interview. Russ explained the IT stuffs by providing simple out IT examples. Thanks for the video!.

[Kenny-ktlk]

Another important take away from this video is don't make thesame mistake twice. One mistake is sufficient for to move on.

[stormchaser]

When he says Bachelor's degree, does that have to be in IT or just a bachelor degree in general?

[chrisalavro]

7:43 Iaas stands for infrastructure As A Service not as a code

[lhommeaumasquedefer]

Once again thanks for informative interview. Much appreciated !

[BogdanIordache]

I am officially in love with Aras "Russ" Memisyazici, his passion about the subject is clearly visible and enjoyable to follow, hope I can find more content that involves him.