🏆 Leadership in FinDevSecOps

Salute,

Today I want to talk to you about what I consider important to me and why I am interested in all this. To be honest, we all think about our contribution, in some way, well, at least we are talking about who is interested in it.

Therefore, we will talk about the importance of developing yourself and that it is important to value your contribution, and the main thing is to do it not just for the sake of it, but to push yourself and have fun in the style of “yes, damn, I did it.”

Being a leader is an opportunity to stand at the origins of the formation of safe development in the largest sector of the Russian economy, influence the technological agenda and develop a career at the industry level.

FinDevSecOps Community

While working in Rosa, I saw cool guys, I thought it would be cool to cut into and drag this story under fintech, then I thought that the development of Rosa was indicative, until everything merged into the T cluster.

FinDevSecOps is a professional community of secure development specialists, created in October 2023 on the site of the FinTech Association (AFT). Brings together leading experts in the financial sector, IT industry and information security to develop DevSecOps practices and open source solutions. For the guys, the mission according to their format:

Achieving a synergistic effect from combining the efforts of participants in the financial and related sectors in the field of secure software development and implementation of open source solutions. To put it simply, guys, we need to cut normal products and do it together so that everyone has fewer problems.

Why should you become a leader in your field? Below I will briefly describe what this means for me:

• Forming sector standards

• Participate in the development of regulatory documents together with regulators (Central Bank of the Russian Federation, FSTEC)

• You influence vendors - your recommendations become a roadmap for tool developers (in any case, expert opinion, in any format, shows an outside view)

• Access to proprietary knowledge of top companies

• Direct communication with experts from all sectors, security vendors, startups and large platforms

• Possibility of a direct line to C-level and decision makers, because they can see you, even with naming know-how. that is, your networking is immediately at the level of people making decisions about budgets, technologies, hiring

• Open-source initiatives and reputation, as an example in my community: trusted repository of source codes and artifacts, open-source DevSecOps tools (my sweaty work) for the financial sector, public frameworks and methodologies

• As a leader, you become a contributor to the decisions that use

• A unique platform for testing hypotheses on real cases (access to the infrastructure of participants), piloting new tools before the official release, conducting research and publishing whitepapers on behalf of the industry

• Formation of the labor market agenda

• Leaders determine what skills become a must-have for AppSec engineers, what tools need to be downloaded

• Media presence and influence

• Publications on vc.ru, Habr, Securitylab on behalf of the community

• Participation in round tables with the Central Bank of the Russian Federation and the Ministry of Digital Development

• Organizing large events and you are associated with expertise at the industry level, not just one company

• Work with future standards such as GOSTs for secure development for the financial sector, methodological recommendations of the Central Bank of the Russian Federation on DevSecOps, industry standards

• As a leader, you form the rules of the game by which all market participants will work

• peer-learning

• You surround yourself with people who: solve problems that are an order of magnitude more complex than usual (scale, compliance, legacy), have experience of failures and successes on million-dollar budgets, think at the level of the architecture of the entire company, and not individual projects

That is, in fact, this dramatically improves your own level - the principle “you become the arithmetic average of the 5 people you communicate with” works.

#paper #specialty