Podcast: Spotlight Interview with Damon Edwards

by

People | Process | Technology Podcast  · The Ops Side of DevSecOps w/ Damon Edwards

When Shannon Lietz and the team at DevSecOps.org published the DevSecOps Manifesto six years ago, security was uppermost in their minds. The manifesto starts with a call to arms ...

"Through Security as Code, we have and will learn that there is simply a better way for security practitioners, like us, to operate and contribute value with less friction. We know we must adapt our ways quickly and foster innovation to ensure data security and privacy issues are not left behind because we were too slow to change." — The DevSecOps Manifesto

The effect of the DevSecOps movement was not understood by many, other than the handful of practitioners who understood what the team was going after: security is the responsibility of everyone, not just the security team. Security deserves a seat at the DevOps table. Fast forward six years, and security is now not just at the table, but sitting at the head of the table, leading the way.

During this transition to focus on security, operations has become the short leg on a three legged stool. What was original a two team party, Dev and Ops, became a threesome, gradually ignoring operations as Developers and Security built a strong relationship. 

Damon Edwards has been my go-to person when I want to talk to someone about how operations continues to be relevant as the third part of DevSecOps. I caught up with Damon a couple weeks back to talk with him about how the transition to enterprise automation is going in the industry, what has been happening in the past year with the COVID lockdown, and what he's looking forward to in 2021. 

I started the conversation, asking how he perceives his role in the DevSecOps Community ...

— Mark Miller, Executive Producer

This broadcast is supported by OWASP and JupiterOne.

 

People | Process | Technology Podcast  · The Ops Side of DevSecOps w/ Damon Edwards

Mark Miller
Mark Miller

Mark Miller speaks and writes extensively on DevSecOps and Cybersecurity. He has published 9 books, including "Modern Cybersecurity: Tales from the Near-Distant Future"

Keep Reading

The AI Act Slowed Down. Your AI Didn't | JupiterOne
June 8, 2026
Blog
The AI Act Slowed Down. Your AI Didn't

The EU AI Act's high-risk deadlines moved to 2027 — but AI keeps shipping. Why the delay is a window, not a reprieve, for security and risk leaders.

What Is Continuous Controls Monitoring? | JupiterOne
June 2, 2026
Blog
The Compliance Industry Automated the Wrong Thing

Evidence collection got faster. Control effectiveness stayed invisible. Continuous controls monitoring fixes the actual problem.

DORA Is a Graph Problem. Most Firms Are Trying to Solve It With a List | JupiterOne
May 29, 2026
Blog
DORA Is a Graph Problem. Most Firms Are Trying to Solve It With a List

DORA demands continuous visibility and dependency mapping that GRC tools, CMDBs, and spreadsheets can't deliver. See why a graph-native approach works.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.