Ahmed AbuGharbia: Upskilling your Security Teammates for Cloud and DevSecOps

Brandon Evans meets with Ahmed AbuGharbia, a Security Manager and Consultant at Sirius Computer Solutions as well as a Certified Instructor Candidate for SANS SEC540: Cloud Security and DevSecOps Automation, to discuss reskilling traditional security professionals to work with Cloud and DevSecOps, getting executive buy-in for investing in their employees, and about an incident he responded to in which all of the infrastructure within his client’s AWS account was deleted.


Our Guest - Ahmed AbuGharbia

Ahmed Abugharbia is a consultant and a manger in the Managed Security Services department at Sirius Computer Solutions in Chicago, IL. Prior to moving to the United States in 2017, Ahmed was a co-founder of Cystack consulting, which has been serving clients in the Middle East for over 10 years, providing assistance to clients with upgrading their information security defenses through deploying security solutions, performing vulnerability and infrastructure assessments, as well as hosting information security training sessions to technical staff. In total, he has over 13 years of experience in the field of information security, with a recent focus on Cloud Security and DevSecOps. Other areas of expertise for Ahmed include Firewalls, IPS, WAF, PKI, Vulnerability Management and Information Security Consulting. Ahmed is an instructor for SEC540: Cloud Security and DevOps Automation (http://www.sans.org/sec540)



Sponsor's Note:




Support for Cloud Ace podcast comes from SANS Institute. If you like the topics covered in this podcast and would like to learn more about cloud security, SANS Cloud Security curriculum is here to support your journey into building, deploying, and managing secure cloud infrastructure, platforms, and applications. Whether you are on a technical flight plan, or a leadership one, SANS Cloud Security curriculum has resources, training, and certifications to fit your needs.






Focus on where the cloud is going, not where it is today. Your organization is going to need someone with hands-on technical experience and cloud security-specific knowledge. You will be prepared not only for your current role, but also for a cutting-edge future in cloud security.






Review and Download Cloud Security Resources: sans.org/cloud-security/ (http://sans.org/cloud-security/)






Join our growing and diverse community of cloud security professionals on your platform of choice:


Discord (http://www.sansurl.com/cloud-discord) | Twitter (https://twitter.com/SANSCloudSec) | (https://www.linkedin.com/showcase/sanscloudsec)


SPONSER NOTE:


Support for Cloud Ace podcast comes from SANS Institute. If you like the topics covered in this podcast and would like to learn more about cloud security, SANS Cloud Security curriculum is here to support your journey into building, deploying, and managing secure cloud infrastructure, platforms, and applications. Whether you are on a technical flight plan, or a leadership one, SANS Cloud Security curriculum has resources, training, and certifications to fit your needs.


Focus on where the cloud is going, not where it is today. Your organization is going to need someone with hands-on technical experience and cloud security-specific knowledge. You will be prepared not only for your current role, but also for a cutting-edge future in cloud security.


Review and Download Cloud Security Resources: sans.org/cloud-security/ (http://sans.org/cloud-security/)


Join our growing and diverse community of cloud security professionals on your platform of choice:


Discord (http://www.sansurl.com/cloud-discord) | Twitter (https://twitter.com/SANSCloudSec) | LinkedIn (https://www.linkedin.com/showcase/sanscloudsec) | YouTube (https://www.youtube.com/SANSCloudSecurity)