Skip to content

Commit 4970b3e

Browse files
committed
feat: Add speaker and program files for Annie Hedgpeth, Debo Ray, Zoë Chalfant, and Scott Bly
1 parent 65aa43e commit 4970b3e

File tree

8 files changed

+180
-0
lines changed

8 files changed

+180
-0
lines changed
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
+++
2+
Talk_date = "2025-03-07"
3+
Talk_start_time = "15:15"
4+
Talk_end_time = "15:30"
5+
Title = "Firewalls and Friendships: Building a Balanced Professional Network"
6+
Type = "talk"
7+
Speakers = ["annie-hedgpeth"]
8+
+++
9+
10+
Many people really struggle with intentional career networking. It can seem scary or pointless or overwhelming, so they end up falling back on default networking, only maintaining professional relationships with those in their immediate circle of influence. Others are very intentional with their networking but end up being takers and not givers, offending those in their network. Still others are worried about asking for anything from their network for fear of seeming like a taker. Being a genuine person in the corporate world is a tricky business.
11+
12+
I'm going to use basic IT systems networking concepts to illustrate career networking concepts in a way that DevOps folks can easily visualize. I will share my experiences with authentic career networking through the lens of systems networking, the good and the bad. Sometimes it has worked out favorably for me, a well balanced ingress and egress! And other times it has left me feeling super crappy and used, egress only sharing. All of it has been educational and has shown me how to be a better network-friend, a well-balanced router and have healthy firewalls. I want to share it all with you in hopes of seeing more authenticity and generosity in our shared work world.
13+
14+
<style>
15+
p {
16+
text-align: justify;
17+
}
18+
</style>
Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
+++
2+
Talk_date = "2025-03-07"
3+
Talk_start_time = "15:30"
4+
Talk_end_time = "15:45"
5+
Title = "Strengthening Vulnerability Management in Cloud Development Environments"
6+
Type = "talk"
7+
Speakers = ["debo-ray"]
8+
+++
9+
10+
Effective vulnerability management is essential for secure cloud-native environments. This talk covers key elements like asset tracking, SBOMs, and risk prioritization. Attendees will learn how to implement monitoring pipelines to detect threats early and evaluate vulnerability impacts in fast-paced DevOps workflows.
11+
12+
Actionable Takeaways:
13+
14+
- Establish scalable vulnerability management processes tailored for cloud-native development.
15+
16+
- Leverage SBOMs to track software components and manage vulnerabilities effectively.
17+
18+
- Develop prioritization techniques to address security risks based on impact and likelihood, enabling faster, targeted responses.
19+
20+
This talk aims to equip attendees with a clear framework for proactive vulnerability management that aligns with the speed and scale of modern cloud environments.
21+
22+
<style>
23+
p {
24+
text-align: justify;
25+
}
26+
</style>
Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
+++
2+
Talk_date = "2025-03-07"
3+
Talk_start_time = "17:00"
4+
Talk_end_time = "17:45"
5+
Title = "Adding API Security to your DevSecOps Toolbelt"
6+
Type = "talk"
7+
Speakers = ["scott-bly"]
8+
+++
9+
10+
How do you integrate API Security into your DevSecOps processes? You have DevOps tooling and CI/CD pipelines for your product release cycle. Your Dev & Ops teams work well together. You started a DevSecOps transformation to Shift Left and test code security in pipelines. But how do you integrate the Security teams into DevOps to achieve true DevSecOps? Then, how do you integrate APIs, as they are behavior-based? Traditional AppSec can't identify vulnerabilities in API consumption. Learn how to integrate API testing into Shift Left DevSecOps pipelines to eliminate vulnerabilities. Learn how to bring Dev, Sec, Ops teams together to improve Mean Time To Remediation, and keep your teams happy!
11+
12+
The Problem:
13+
14+
DevOps Release code to market faster Traditional release 1-2x annual fails at cloud scale DevOps tooling, microservices architecture allow independent releases DevOps culture grew organically as Dev and Ops teams learned to work harmoniously. DevSecOps Newer thinking - security integration to DevOps processes, AppSec integration to pipelines improved code security But developers are still incentivized to get features to market fast Ops teams are incentivized for uptime and keeping dev teams moving Security teams are incentivized to reduce risk, in opposition to above objectives. Risk reduction slows development, blocks code release due to late stage vulnerability discovery. Shift left moves discovery earlier, but security teams are already stretched thin. API security is behavior based, not traditional code security discoverable, so how do you add this?
15+
16+
The Solution
17+
18+
Shift further left Integrate Security teams even earlier in the pipeline - catch problems at the design stage. APIs are products that deliver data, and the business problems can be caught at design stage as well, Tooling API Scanning tools can integrate to CI/CD pipelines, shifting left into the existing test/build phases But they require live dev environments to test API behavior, Culture DevSecOps triad in large orgs are siloed Form DevSecOps Center of Excellence as first steps Share best practices Co-host technical trainings Co-host social events to bring teams together organically Cross-incentivize.
19+
20+
<style>
21+
p {
22+
text-align: justify;
23+
}
24+
</style>
Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
+++
2+
Talk_date = "2025-03-07"
3+
Talk_start_time = "16:00"
4+
Talk_end_time = "16:45"
5+
Title = "Staying Sane In Technology Careers: Managing Mental Health"
6+
Type = "talk"
7+
Speakers = ["zoe-chalfant"]
8+
+++
9+
10+
Mental health is a salient topic of concern in the tech industry. Indeed, our industry in particular attracts individuals with a seemingly higher-than-average incidence of neurodivergence or neuroticism. Attending to one's mental health is an important aspect of managing a career for the long term in an industry that can revolve around textual communication, create fewer opportunities for meaningful social interaction than other careers, and increases the potential for social isolation with the advent of widespread remote work.
11+
12+
Discussing mental health can often be stigmatized, especially in an industry such as ours where company cultures can inculcate impostor syndrome and a pressure to perform at increasingly high levels, as well as a high pace of execution and meeting demanding delivery deadlines. While "self-care" and "work-life balance" are often touted as values, these ideas can be vaguely articulated and encouraged only in the abstract. Self-advocacy for creating space for attending to mental health can be challenging, and we often lack the language, skills, and confidence to navigate investing in one's own mental health.
13+
14+
Indeed, it is crucial to pro-actively create space to manage mental health -- developing the self-awareness to know when one needs a break, whether that means planning for sustainable work pace or taking time off, is very important. And when crises do happen, having the confidence to take a leave of absence or find a different position where expectations can be more sustainable is critical, especially in an industry that touts perpetual "growth mindset."
15+
16+
<style>
17+
p {
18+
text-align: justify;
19+
}
20+
</style>
Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
+++
2+
Title = "Annie Hedgpeth"
3+
type = "speaker"
4+
image = "annie-hedgpeth.jpg"
5+
linktitle = "annie-hedgpeth"
6+
+++
7+
<h3>
8+
Co-Founder
9+
Hedge-Ops Software
10+
</h3>
11+
12+
<p>
13+
From film to engineering, Annie's career has seen many iterations. She is a keen observer of what works and what doesn't, striving always to make the right thing to do the easy thing to do. Annie and her husband, Michael, are raising their three teenagers in Boulder, CO. She's currently working on a project to make doing the right thing with your career the easy thing to do. Find out more at people-work.io.
14+
</p>
15+
16+
<style>
17+
p {
18+
text-align: justify;
19+
}
20+
</style>
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
+++
2+
Title = "Debo Ray"
3+
type = "speaker"
4+
image = "debo-ray.jpg"
5+
linktitle = "debo-ray"
6+
+++
7+
<h3>
8+
Co-Founder, COO
9+
DevZero
10+
</h3>
11+
12+
<p>
13+
Rob Fletcher is the Co-Founder and Chief Operating Officer of DevZero, a Seattle-based startup specializing in cloud-based development platforms that enable developers to write and test code in production-like environments.
14+
15+
Before founding DevZero in 2021, Rob held significant roles in security engineering at major tech companies. He served as Head of Product Security at Uber, leading a team of over 45 security engineers, engineering managers, and product managers. Following his tenure at Uber, he became a Security Engineering Manager at Meta (formerly Facebook).
16+
</p>
17+
18+
<style>
19+
p {
20+
text-align: justify;
21+
}
22+
</style>
Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
+++
2+
Title = "Scott Bly"
3+
type = "speaker"
4+
image = "scott-bly.jpg"
5+
linktitle = "scott-bly"
6+
+++
7+
<h3>
8+
Director, API Security Practice
9+
iSOA Group
10+
</h3>
11+
12+
<p>
13+
Scott Bly is the Director of the API Security Practice at iSOA Group where he leads customer DevSecOps transformations through an API-first journey of cyber maturity and continual improvement.
14+
15+
Scott has served as a Cybersecurity Technical Account Manager (TAM) at Noname Security, and he led teams of TAMs at AWS where he ran the Enterprise Support Security Improvement Program, which has assisted thousands of customers to measure and improve their cloud security postures.
16+
17+
Scott's background as a film production major at USC and longtime IT Consultant was the perfect fit during his tenure as the Director of IT for the American Film Institute, where he led their digital transformation and migration to the cloud.
18+
19+
Scott has served as a Cybersecurity Solutions Architect and holds more than 50 certifications in IT and security, including CISSP and CISM, and from vendors such as Fortinet, Cisco and AWS.
20+
21+
Scott lives in Santa Monica with his wife, son, and two cats.
22+
</p>
23+
24+
<style>
25+
p {
26+
text-align: justify;
27+
}
28+
</style>
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
+++
2+
Title = "Zoë Chalfant"
3+
type = "speaker"
4+
image = "zoe-chalfant.jpg"
5+
linktitle = "zoe-chalfant"
6+
+++
7+
<h3>
8+
Staff Platform Engineer
9+
BabyList, Inc
10+
</h3>
11+
12+
<p>
13+
Zoë Chalfant studied Political Science and East Asian Languages and Civilizations at the University of Chicago. She worked for approximately 8 years at Facebook/Meta as a Production Engineer. Currently she is a Staff Engineer at BabyList, Inc working on infrastructure systems.
14+
15+
Partially trained as a psychotherapist, she volunteers as a phone counselor at the Seattle-based Crisis Connections hotline and volunteers with the Puget Sound Rangers (Burning Man affiliated) as an at-event crisis counselor who provides counseling to participants having intense emotional or other kinds of experiences. She also volunteers as a staff historian with the Burning Man Project.
16+
</p>
17+
18+
<style>
19+
p {
20+
text-align: justify;
21+
}
22+
</style>

0 commit comments

Comments
 (0)