Application Security in a DevOps, Cloud and API World
CISO Dinner
Attendees Include
Syed Ishaq Bukhari
Global Head of Security
HelloFresh
About Me
Syed Ishaq Bokhari is a Director at HelloFresh Group, leading its global cybersecurity function. With 15 years of industry experience, he combines technical depth with strategic leadership to deliver risk-driven security programs that enable enterprise innovation and secure AI transformation.
Sebastien Jeanquier
Chief Security Officer
Upvest
About Me
A security leader offering both a holistic approach combined with a deeply technical skill set. Hugely passionate about information security, and with 15+ years of IT and security experience, I aim to bring a unique insight into how security is applied across all different levels of an organisation. My experience in security advisory consulting, penetration testing and incident management spans across a large variety of industries. I am committed to delivering value, expertise and attention to detail to all projects I deliver. I manage teams and engagements effectively, and work on developing relationships based on trust.
My skills range across a number of technical and non-technical areas including:
• Penetration Testing
• Vulnerability Assessments
• Infrastructure and Wireless Security
• Application Security (Web and thick-client)
• Secure Coding Practices
• Experience with Java, Perl, Python, PHP, ASP
• Physical Security (lock picking and security design)
• Social Engineering
• Security Architecture
• Security Incident Management
• Security Strategy Design and Advisory
• Business Continuity and Disaster Recovery
• Risk Assessments and Threat Modelling
• PCI-DSS Compliance
Founder of information security blog: Security Generation (securitygeneration.com)
Pranav Vattaparambil
Head of Cyber Security
solarisBank
About Me
Known for protecting data and critical assets by embedding robust information security and governance in internal / customer environments, I’m a Cyber Security Executive with 12 years of experience in the industry. I’ve built programmes and strategies for various high-tech organisations and startups. My goal is to identify & mitigate threats, design policies, standards, processes and controls that enable secure, compliant operations and provide value-driven risk reduction.
Currently, as the Head of Cyber Security at Solarisbank, I, along with my team, are the first line of defence, driving operational security and risk initiatives to fortify the company’s security posture and optimize security services for our partners. Created Solarisbank's business-aligned security strategy, which was based both on compliance frameworks but also included a pragmatic response and roadmap to remediate security risks that the company had taken on. Through execution and partnership, I've been able to win trust from my peers and from the leadership team to help them understand the importance of prioritizing security-related initiatives that require resourcing. Helping my peers think about security in a more positive way as a business enabler has been a difference-maker. In prior roles, I’ve yielded similar results.
Robert Smith
Field CISO
Noname Security
About Me
Information Technology Leader with a focus on Security, Architecture and Operations. Experienced in regulatory compliances & security frameworks: HIPAA, PCI, SOX, COBIT, ISO, NIST, SANS20. Consistently leading strategic planning, policy development and day-to-day operations of information security function in close coordination with all corporate departments aligned with corporate vision. Proficient in target enumeration, vulnerability assessments, risk analysis and management, open source intelligence gathering, social engineering, IDS/IPS and SIEM tools.
Torben Wedekind
Chief Architect
Bundesdruckerei
Oussama Jarrousse
Head of Software Development
Munich Innovation Labs
Torben Wedekind
Chief Architect
Bundesdruckerei
Oussama Jarrousse
Head of Software Development
Munich Innovation Labs
EVENT DETAILS
March 23, 2022
Agenda
5:30 PM-9:00 PM
Application Security in a DevOps, Cloud and API World
Security teams are challenged to modernize application security practices in light of accelerating shifts to DevOps delivery models and rapid adoption of cloud-native application designs. Applications built on microservices (e.g. serverless, containers, APIs) and delivered continuously are outpacing application security teams ability to secure them. CISOs need to consider new skills, new touch points and new platforms to maintain a strong security posture in light of these trends and the speed at which they are re-shaping IT.
Panelists
Speaker
Robert Smith
Field CISO
Noname Security
Information Technology Leader with a focus on Security, Architecture and Operations. Experienced in regulatory compliances & security frameworks: HIPAA, PCI, SOX, COBIT, ISO, NIST, SANS20. Consistently leading strategic planning, policy development and day-to-day operations of information security function in close coordination with all corporate departments aligned with corporate vision. Proficient in target enumeration, vulnerability assessments, risk analysis and management, open source intelligence gathering, social engineering, IDS/IPS and SIEM tools.
Speaker
Syed Ishaq Bukhari
Global Head of Security
HelloFresh
Syed Ishaq Bokhari is a Director at HelloFresh Group, leading its global cybersecurity function. With 15 years of industry experience, he combines technical depth with strategic leadership to deliver risk-driven security programs that enable enterprise innovation and secure AI transformation.
Speaker
Sebastien Jeanquier
Chief Security Officer
Upvest
A security leader offering both a holistic approach combined with a deeply technical skill set. Hugely passionate about information security, and with 15+ years of IT and security experience, I aim to bring a unique insight into how security is applied across all different levels of an organisation. My experience in security advisory consulting, penetration testing and incident management spans across a large variety of industries. I am committed to delivering value, expertise and attention to detail to all projects I deliver. I manage teams and engagements effectively, and work on developing relationships based on trust.
My skills range across a number of technical and non-technical areas including:
• Penetration Testing
• Vulnerability Assessments
• Infrastructure and Wireless Security
• Application Security (Web and thick-client)
• Secure Coding Practices
• Experience with Java, Perl, Python, PHP, ASP
• Physical Security (lock picking and security design)
• Social Engineering
• Security Architecture
• Security Incident Management
• Security Strategy Design and Advisory
• Business Continuity and Disaster Recovery
• Risk Assessments and Threat Modelling
• PCI-DSS Compliance
Founder of information security blog: Security Generation (securitygeneration.com)
Speaker
Pranav Vattaparambil
Head of Cyber Security
solarisBank
Known for protecting data and critical assets by embedding robust information security and governance in internal / customer environments, I’m a Cyber Security Executive with 12 years of experience in the industry. I’ve built programmes and strategies for various high-tech organisations and startups. My goal is to identify & mitigate threats, design policies, standards, processes and controls that enable secure, compliant operations and provide value-driven risk reduction.
Currently, as the Head of Cyber Security at Solarisbank, I, along with my team, are the first line of defence, driving operational security and risk initiatives to fortify the company’s security posture and optimize security services for our partners. Created Solarisbank's business-aligned security strategy, which was based both on compliance frameworks but also included a pragmatic response and roadmap to remediate security risks that the company had taken on. Through execution and partnership, I've been able to win trust from my peers and from the leadership team to help them understand the importance of prioritizing security-related initiatives that require resourcing. Helping my peers think about security in a more positive way as a business enabler has been a difference-maker. In prior roles, I’ve yielded similar results.
Together With
