Scanning in the IDE: A Bad IDE(A) for Developers

The information shared in this series is derived from my experience building the DevSecOps program at Thermo Fisher Scientific (a global Fortune 100 laboratory sciences company). Full Disclosure u...

Dec 8, 2022 DevSecOps, Static Analysis

Great Reads of 2022

One thing I particularly enjoy doing with my free time is reading - whether that be books, blogs, news articles, or research papers. This year I’ve enjoyed reading about a number of interesting top...

Dec 2, 2022 Off-Topic, Reading

Security Maturity: Geriatric Technologies

TL;DR / Summary at the end of the post. The information shared in this series is derived from my experience building the DevSecOps program at Thermo Fisher Scientific (a global Fortune 100 laborato...

Nov 14, 2022 DevSecOps, Maturity

With Technology, there’s no such thing as “Magic"’

TL;DR / Summary at the end of the post. Disclaimer: The thoughts and opinions shared in this post are mine alone, and do not reflect those of my employer - or any other organization that I am affi...

Oct 14, 2022 DevSecOps, Thoughts

Security Maturity: Geriatric Teams

Sep 28, 2022 DevSecOps, Maturity

Security Maturity: Mature Technologies

Sep 16, 2022 DevSecOps, Maturity

Security Maturity: Mature Teams

Sep 9, 2022 DevSecOps, Maturity

Security Maturity: Adolescent Technologies

Aug 31, 2022 DevSecOps, Maturity

Surviving the Pan-decade: Seclusion

TL;DR / Summary at the end of the post. As I’ve said before, I hope that all of you who read this - and all those you care for - live long, fulfilling lives. I fear that many will not live to see 2...

Aug 10, 2022 Off-Topic, Pandemic

Security Maturity: Adolescent Teams

Aug 4, 2022 DevSecOps, Maturity