Nomura

At Nomura, I am heading DevSecOps including AppSec for Nomura Group. As part of my responsibilities, I am building out application security practices (SAST, SCA, DAST) as well as an Application Security Champion program to ensure close alignment of DevSecOps with our developer and DevOps community of 3000+ developers. Amongst other things, my team is setting best practices and standards, automates risk scoring of findings across all tools, integrates security into the build and deploy pipelines, advises the firm in security related areas, helps developers with remediation or mitigation suggestions, and provides a roadmap to mature DevSecOps while keeping up with cloud, infrastructure as code, and AI related innovations. In my short time at Nomura, my impact includes * security awareness of development teams and leadership with education, training, and reporting * creation and establishment of an application security champion program * automating the gathering, normalization, enrichment, and risk scoring of findings across our secure coding practices * promoting the value of AppSec and DevSecOps to leadership * socializing a risk based approach to security * mentoring my team and security professionals outside my team I am looking forward to extend impact into our global organization and be instrumental in maturing our organizations DevSecOps practices.