Suggestions
Mathias Conradt
Principal Solutions Engineer at Snyk • OWASP Member • CTF Player
Mathias Conradt is a cybersecurity professional currently serving as the Technical Lead DACH at Snyk, a company focused on DevSecOps and cloud-native application security.3 He has over 25 years of professional experience in software engineering, project management, and pre-sales.3
Conradt's career highlights include:
- Being the first solutions engineer for Snyk in the DACH region, where he has worked since December 2020.13
- Previously holding a similar pioneering role at Auth0, specializing in identity and access management.12
- Co-founding Quasr, a European Customer Identity & Access Management (CIAM) platform.3
- Initiating the "Identity & Security Germany" and "DevSecCon Germany" meetup series.3
He is known for his expertise in:
- DevSecOps and AppSec
- Cloud-native application security
- Identity and access management
- Open source software
- Business process automation
Conradt is an AWS Certified Solutions Architect and holds certifications in Scrum, PRINCE2, and ITIL.23 He is also a frequent speaker at security-related industry events and has experience working in various countries, including Hong Kong, China, Macau, and Switzerland.23
Highlights
The time after the summer holidays is when the events, meet up and trade show time starts again. Meet the Snyk DACH team at the following upcoming events 🤝
💠 04. Sep: AWS Summit Zurich: Meet the Snyk DACH team #awssummit 💠 17. Sep: OWASP Stammtisch Stuttgart: I'll be introducing OWASP SAMM #owasp #owaspsamm 💠 01. Oct: Deloitte & Snyk Webcast (Remote): Securing Application Development in the Age of AI #deloitte 💠 22.-24. Oct: IT-SA Nuremberg: Meet the Snyk DACH team. #itsa 💠 12.-13. Nov: German OWASP Day, Leipzip
Last week I visited my hometown Hamburg 🇩🇪 ⚓ , holding two small workshops at customers onsite to discuss the benefits of the 📓 OWASP SAMM - Software Assurance Maturity Model with them and how it can help to improve and measure the Secure Software Development Lifecycle (SSDLC).
Being a proponent of open source and open knowledge approaches, I very much favor OWASP SAMM over other more proprietary frameworks and models out there. Also, SAMM comes with a couple of benefits which are:
OWASP SAMM is... ✅ Measurable: offering defined maturity levels across security practices ✅ Actionable: providing clear pathways for improving maturity levels ✅ Versatile: it's technology, process, and organization agnostic ✅ Open: established non-proprietary model with a large, active community
It's ideal for companies who have mature DevOps processes in place and want to formalize their appsec program and measure their security efforts.
The mission of OWASP Software Assurance Maturity Model (SAMM) is to be the prime maturity model for software assurance that provides an effective and measurable way for all types of organizations to analyze and improve their software security posture. OWASP SAMM supports the complete software lifecycle, including development and acquisition, and is technology and process agnostic. It is intentionally built to be evolutive and risk-driven in nature.
🗓 🤝 If you happen to be in Stuttgart in September: I'll be presenting the model as well at the next OWASP Stuttgart Stammtisch: https://lnkd.in/e4G_cMZF
By the way: from a tooling perspective, Snyk can perfectly support a lot of the security practices mentioned in OWASP SAMM 😃
James Pritchard Urszula Etheridge Kai Meder Eike Lurz Thomas W.
#owasp #owaspsamm #snyk #devsecops #infosec #cybersecurity
