AI + Security: Building Secure-by-Default Workflows for Modern Engineering

### The Problem Every Engineering Team Is Facing Right Now AI coding assistants have transformed how we build software. Development velocity has skyrocketed. But here's what nobody's talking about: we're shipping vulnerabilities at the same pace we're shipping features. Every hallucinated security config. Every auto-completed credential. Every "looks good" from your AI pair programmer that wasn't actually secure. They're all piling up in production right now. **This isn't theory. It's the day-to-day reality of modern DevOps, Cloud, and Security teams.** *** ### What You'll Learn This technical session goes beyond the hype to show you exactly how AI introduces risk and what the best teams are doing about it: **🔍 Real Vulnerability Examples** See actual cases of AI-introduced security gaps in IaC, CI/CD pipelines, and runtime environments **⚡ Secure-by-Default Workflows** Learn how high-velocity teams build security into their speed, not around it **🤖 AI as a Security Assistant** Flip the script: use AI to catch what AI creates **🔄 Runtime Feedback Loops** Discover how runtime signals should flow back into developer workflows **🏢 Enterprise Context Matters** Why generic AI tools don't understand your security requirements (and what to do about it) **📊 Complete Case Study** Walk through an end-to-end workflow: deployed infrastructure → risk assessment → shift-left remediation → secure redeployment *** ### Who Should Attend * **DevOps Engineers** dealing with AI-generated infrastructure code * **Security Engineers** struggling to keep pace with AI-accelerated delivery * **Cloud Engineers** managing complex, AI-built environments * **Platform Engineers** building internal developer platforms * **Engineering Leaders** balancing speed with security * **Anyone** using AI coding assistants in production environments *** ### What Makes This Different This isn't vendor theater or surface-level theory. It's a technical deep-dive with real examples, practical workflows, and actionable strategies you can implement immediately. You'll see: * What AI vulnerabilities actually look like in the wild * How to build security guardrails without slowing down teams * Tools and processes that work at scale * Real failures and what we learned from them *** ### Your Speakers **Seif Hateb** – Principal Security Engineer Deep expertise in DevSecOps and securing high-velocity engineering workflows **Justin O'Connor** – Founder, Onward Platforms Building tools that help teams ship secure infrastructure at scale **Tarak** – Co-builder of InfraCodeBase Hands-on experience building security into AI-powered development platforms *** ### Format * **60-minute session** with live presentation and Q&A * Real demos and case studies * Practical takeaways you can use immediately * Time for your questions *** ### The Bottom Line AI is making us ship faster than ever. But speed without security isn't progress—it's risk accumulation. The best teams aren't choosing between velocity and security. They're building workflows where both scale together. **Join us to learn how.** See you there. Or see your vulnerabilities in production. Your choice.