Life of a DevSecOps Engineer (w/ Aras "Russ" Memisyazici)

Russ Memisyazici is a DevSecOps engineer and cloud architect with 30+ years experience in IT and cyber security. From coaching US CyberPatriot teams to building the Virginia Cyber Range, he's got quite the colorful career.
By-the-way, it’s pronounced: my-mish-yah-zuh-juh.
In this interview, Russ shares his knowledge on:
- Cloud risks
- Future cloud technologies
- Thoughts on cyber certifications
- His personal journey in cyber security.
There's also advice for starting a DevSecOps career too!
DevSecOps combines cyber security with traditional DevOps to help developers deliver secure apps. As a DevSecOps engineer, you’ve got to be well-versed in both software development, IT operations, and cyber security. Whether it’s application security assessments, cloud deployments, or coding, you need a wide range of skills. It’s system administration on steroids.
A common DevSecOps workflow would be defining your entire infrastructure and deployment cycle as code. Then you would automate the tests, security assessment, and deployment with a CICD tool like Jenkins.
DevSecOps personnel are very sought after in the startup world. When it comes to building scalable infrastructure and deploying apps, DevSecOps folks are commandos of the tech world. It’s a fast-moving domain, with terminology and technology changing from one day to the next. Soon the term “DevSecOps” might even be replaced with “GitOps.”
But the most important thing that Russ highlights is to focus on the basics. Fundamentals like networking, scripting, or system administration, don’t change as much. Fancy new technologies that are coming out are all built on top of these skills. But they do take reading books and good old-fashioned keyboarding to acquire.
00:00 Introduction - Aras "Russ" Memisyazici
01:36 What is DevSecOps?
04:10 Why Is DevSecOps Critical for Cybersecurity?
07:24 Role of DevSecOps in Securing Infrastructure
10:04 What Technologies and Skills are Important for DevSecOps?
13:04 How Much Does DevSecOps Pay?
15:47 Roles & Opportunities for DevSecOps
17:25 Books and Resources for Learning DevSecOps
23:20 What is the Cloud?
27:57 What Risks are Associated with the Cloud?
32:22 What's the Future of Cloud Technology?
37:0 How Important Are Cybersecurity Certifications?
44:29 What Is the Value of Cybersecurity Programs?
50:10 What are Shortcomings of Cyber Education Currently?
55:50 Russ's Personal Cybersecurity Journey
1:05:58 Get in Touch with Russ Memisyazici
LIKE and SUBSCRIBE
---- Resources ----
Phoenix Project, Gene Kim
www.amazon.com/Phoenix-Projec...
The DevOpSec Book, Jim Bird
www.oreilly.com/library/view/...
Hands-on Security in DevOps, Tony Hsiang-Chih Hsu
www.amazon.com/Hands-Security...
Agile Application Security, Laura Bell
www.amazon.com/Agile-Applicat...
Site Reliability Engineering (SRE) Workbook,
sre.google/workbook/table-of-...
The Site Reliability Workbook, O’Reilly
www.oreilly.com/library/view/...
#DevSecOps #DevOps #Cyberspatial

[@sultanqureshi2766]

He guided an entire generation of engineers, millions of videos on internet but this one video is enough to guide the whole humanity on education system, computer science and security. I wish he was my instructor and trainer.

[@sobc2737]

Highly enjoyed this interview. I'm going to listen to this again.

[@BogdanIordache88]

I am officially in love with Aras "Russ" Memisyazici, his passion about the subject is clearly visible and enjoyable to follow, hope I can find more content that involves him.

[@bitcode_]

this channel us underrated, keep up the awesome work!

[@sofiakim8466]

Awesome content as always! Russ is so passionate. His students are lucky!

[@Cyberspatial]

Indeed! 🙌

[@surendrabhagat6722]

Keep uploading such educational videos. Really appreciate your effort

[@Cyberspatial]

Awesome. Thank You!

[@davidgaliata75]

This is one of the best interviews I’ve come across. This guy seriously “gets it” and explains everything very well. I tell my clients a lot of this stuff and will use some examples provided to further cement the topics. Wonderful stuff!

[@Cyberspatial]

Share this with your clients! Thank you!

[@lhommeaumasquedefer6920]

Once again thanks for informative interview. Much appreciated !

[@Cyberspatial]

You're welcome :)

[@olumayoor]

This is gold!!! I enjoyed every minute of this!

[@uppilibadri2170]

Much needed topic. Thanks man!

[@Cyberspatial]

You're Welcome!

[@bijayalaxmisahoo4195]

Wow just fell in love with the grace in explaining the concepts so nicely.Thank you for such nice video

[@feyzatekin1319]

This was really helped me and give positive energy. Thank you!

[@shravankumarsheri6732]

Man this content is helping ❤️❤️

[@Cyberspatial]

For sure :)

[@NeilSearle]

Good interviewing, you ask relevant questions then let the interviewee answer without interrupting. Russ had a lot to say and was interesting and entertaining.

[@m.riduanabid2360]

Awesome: Indeed, being passionate and enthusiastic about what we convey to students is the key - You are a passionate! Thrilled to follow your talk,

[@mohanrajloganathan620]

Awesome interview. Russ explained the IT stuffs by providing simple out IT examples. Thanks for the video!.

[@pawbard]

Fascinating interview, instant Like. Thanks!

[@Cyberspatial]

Thanks for the support!

[@hakanerdogan1299]

Real expert in cybersecurity, great content and source of positive energy !

[@Cyberspatial]

Thanks so much!

[@jordan184]

Keep putting out the great content my guy

[@Cyberspatial]

For sure :)

[@thesuperiorman8342]

When he said "the concept of self-healing... just really means restarting the service... let's turn it on and off again" LOL I knew this is someone I want to listen to. He's gonna cut the BS and just speak facts.

[@yanntchuise8430]

This guy knows his stuff.

[@naveedpasha5096]

Wooow This video is Awesome👏👏👏 I set goal for DevSecOps now which I really wanted to go... Prof is like "Ask me anything I have the answer" He started from basic now he is best what he doing... He also give knowledge which most of them won't do in IT industry.... Thanks a lot of this video helped me alot for further plan

[@Cyberspatial]

Great to hear! All the best on your journey :)

[@spartanthakur5823]

This was really informative and helpful , thankyou so much

[@Cyberspatial]

You're welcome!

[@rodrigolourenco1968]

Awesome! That guy just gave me a heck of motivation!

[@iasoto]

Inspiring! Thanks a lot

[@shuluspa]

Superb interview!

[@ivaldirbatalha5436]

In most of your interviews you ask them their opinion about cybersecurity certs, i totally get your point. I don't like them, although some of them, few of are quite decent per say and actually teach something, but the reason I don't like them is that they teaching people to realy on tools and giving them a false sense of expertise, and not to build and learn real hacking, although this is not formulated yet and it's hard and takes time to learn. Great video, keep it up!

[@Cyberspatial]

For sure! It's one of those highly opinionated topics that's nice to get everybody's perspective on. A simple yes/no is far too simple; there's always nuances and exceptions. The content that comes with certs is valuable for providing surface level knowledge and awareness. Beyond that, hands-on keyboard and experience over time is the real deal.

[@9fxhrlif9er]

Thank you for interviewing Aras! I am also a Cloud and DevSecOps Architect and this is the BEST video on KZbin that actually describes what DevSecOps is correctly. So sick of all other other videos and with self proclaimed thought leaders making it seem like DevSecOps is strictly about building CI/CD pipelines with a couple of AppSec steps, lol. That being said, I don't agree with his view that a degree is important, as it frankly just goes as deep as certifications in my view. It's experience that shows experience, and degrees don't prove experience. He obviously has bias (conflict of interest) since he makes part of his living as a part-time college professor.

[@dawntan5652]

Candid but Awesome! 👍👍👍🤘

[@Cyberspatial]

Thank you!

[@parvezap9069]

sooper wisdom sharing interview.

[@rexyfahrezi]

nice content, that helped me alot I love it!

[@Cyberspatial]

Glad to hear!

[@92Ediz]

Great content👏🏼

[@Cyberspatial]

Thank You!

[@manfrombritain6816]

this guy explains stuff great

[@joshuaakujobi8202]

This is content 👌

[@isfk]

He gives me faith in schools again.

[@marksantarina]

This was 2 years ago, he was right AI is indeed scary

[@chrisalavro6815]

7:43 Iaas stands for infrastructure As A Service not as a code

[@ilyaLNYC]

1:02:14 Back and forth and that's how IO works on HDD :) J/k but nice session! Was looking for DevSecOps material and found this one...

[@supermachhi1731]

Hi dear.....I love you for posting this great video....it's more interesting than a movie. I'm watching this at 03:00 A.M. Indian Standard Time.

[@Cyberspatial]

Make sure to get sleep, otherwise you'll forget what you watched!

[@Nedwin]

❤️

[@Cyberspatial]

❤️

[@MrSinaPRO]

Hi Cyberspatial! Can you make a video of VPNs? Questions about VPN: How much protection? How does it work with day to day usage (buying goods with VPN makes bank/PayPal alarms go off) and How can we protect our self :) Love All your videos, Please keep them coming! Thank you

[@Cyberspatial]

That's a great idea! There's a lot of voodoo and snake oil on VPNs so I think it's worth doing!

[@Esteban7GT]

Can you please tell me what is the black wireless keyboard that you use on the introductions for your videos?

[@Cyberspatial]

AnnePro2

[@bogardann4968]

Dat guys is our messiah ! :D

[@qumem18]

Adamın dibiii büyük siber savaşçı

[@Cyberspatial]

:)

[@qumem18]

@@Cyberspatial :)

[@Words-of-encouragement.-.]

Came for the value, Liked for the paint dry joke lol.

[@alexanderayegba4669]

Can I study DevsecOp Without having IT background?

[@maximefcom]

Are you using a Huawei Matebook D15?

[@Cyberspatial]

Macbook Pro.

[@stormchaser419]

When he says Bachelor's degree, does that have to be in IT or just a bachelor degree in general?

[@Cyberspatial]

A degree is most beneficial if it is somehow related to your career field, but not absolutely necessary. Any degree is better than no degree at all as long as you have the prerequisite skills to add value in the job you are working.

[@stormchaser419]

@@Cyberspatial I have 2 bachelor degrees in Business and Education and I am currently trying to break into the IT field and cybersecurity. My recruiter had an IT auditing job interview lined up but the company put those on hold until spring due to the economy I believe. I just want to know moving forward whether not having my bachelors in IT will be the albatross that may hold me back in this field. If it may even keep me in the future of getting that ONE opportunity between me and anthor candidate and it's a six figure job then what?

[@a4ldev933]

Russ.. the story of two solders is the best joke of the day.

[@sylvesterjones9713]

I am a beginner where do I start from?

[@Cyberspatial]

Read the books he mentioned!

[@JohnLee-dz6hu]

First comment here!

[@Cyberspatial]

Thanks for tuning in 🙌

[@nexovec]

I'm almost sure that the video is dubbed, because the profs webcam is heavily cut, whereas yours isn't

[@yourfellowhumanbeing2323]

He is recording from his end, thats why. Feed yourself some thoughts XD

[@Cyberspatial]

Wouldn't it be amazing if it was? Multitrack recording.

[@yourfellowhumanbeing2323]

@@Cyberspatial yep

[@liesdamnlies3372]

That...is a lot of heckin’ letters after his name. Holy shit. Edit: Also, “got hacked so bad because I set all the VLANs to trunk because I didn’t know any better and just wanted it to work”. Me, having finished the CCNA portion of the cybersecurity program I’m in: oh god no. No. No! NOOOOOOOOOOOOOOOOOO

[@Cyberspatial]

🤣 CCNA is a great crash course on networking though.

[@gromit576]

the interviewer has more expressions delivered in one sentence than the actress had in the whole movie Mulan. I am distracted by his eyebrows that seem to have a life of its own

[@Cyberspatial]

😅

[@shaju33]

if you are abt cybersecurity , welcome to hell💥💥💥💥😍

[@InfoTechno150]

promo sm