Security as a Service - Work Where You Engineers Live

Explore a conference talk from AppSecUSA 2018 that delves into the concept of "Security as a Service" and how to integrate security practices seamlessly into the software development lifecycle. Learn how Adobe's security team improved their effectiveness by adopting a 'live where they work' approach, aligning security processes with existing software development tools and workflows. Discover strategies for implementing a zero-overhead 3rd Party Library vulnerability detection program, automating security ticket creation, and managing vulnerabilities using project tracking software. Gain insights into how this approach enables rapid response to library vulnerabilities across multiple products and enhances collaboration between security and product engineering teams.