Practical DevSecOps

As organizations rapidly adopt the Model Context Protocol (MCP) to connect AI agents to production data and internal tools, a massive security gap has emerged.  In this episode, we explore why MCP security has become one of the fastest-rising hiring signals in the cybersecurity industry and how mastering these skills can dramatically increase your salary potential. Featured Resource: Learn more ab...

The high-speed adoption of AI agents has a new "default" language: The Model Context Protocol (MCP).  While MCP provides a seamless way for Large Language Models (LLMs) to interact with tools, databases, and APIs, it has also introduced significant new attack surfaces. In this episode, we break down the MCP Security Best Practices: 2026 Playbook to help security engineers and developers...

In this episode, we dive into the "MCP Security Risk Framework for Enterprise CISOs", exploring how to secure AI agents against the unique threat of agentic amplification .  Ready to lead your organisation’s AI security strategy? Upskill your team with the Certified MCP Security Expert (CMCPSE)   course, featuring over 30 hands-on labs to attack, defend, and pen test MCP servers Unlike s...

In this episode, we dive deep into the OWASP MCP Top 10 , the first official security framework dedicated to the Model Context Protocol (MCP) .  Ready to lead your team’s AI security strategy and bridge the skills gap? Enroll in the Certified MCP Security Expert (CMCPSE ) Course today! Get hands-on experience in tool poisoning labs, OAuth 2.1 hardening, MCP red-teaming, and shadow server detection...

Transitioning from a technical engineer to an Application Security (AppSec) Manager is rarely a straight line; it requires balancing technical expertise with the strategic mindset needed to lead a department.  In this episode, we break down the realistic 5–8 year career path for aspiring leaders, moving from hands-on development to managing end-to-end security programs. We dive into the "mess...

Welcome to The DevSecOps Edge , the podcast dedicated to helping you become one of the top 1% of cybersecurity engineers in the industry. In a world where APIs account for 80% of internet traffic and 94% of web breaches start at the API layer, staying ahead of the curve isn't just an advantage—it's a necessity. In our featured episodes, we tackle the biggest questions facing security pro...

Is your API documentation telling the truth? In this episode, we dive into the uncomfortable reality that API documentation is often a "lie" because of the gap between Swagger files and what is actually running in production. We explore how attackers exploit this gap using advanced fuzzing techniques and JWT manipulation, and why a centralised defense strategy using Kong API Gateway is t...

n this episode, we tackle the rapidly evolving landscape of artificial intelligence and the critical need for specialized security expertise. As Large Language Models (LLMs) and autonomous agents become integrated into the modern enterprise, they bring a new set of risks, including prompt injection, training data poisoning, and insecure plugin designs .  To help you navigate your career path in th...

In this episode, we dive deep into the SLSA (Supply-chain Levels for Software Artifacts) framework, the definitive standard for securing your software supply chain. With software supply chain attacks increasing by 742% between 2019 and 2022, understanding frameworks like SLSA—pronounced "salsa"—is no longer optional; it is an operational reality. We explore the origins of SLSA, which beg...

In this episode, we explore the explosive growth of the DevSecOps market, which is projected to reach between USD 8.58 billion and USD 10.88 billion by 2026 . Driven by cloud-native transitions, AI integration, and intensifying regulatory pressures, the industry is witnessing a compound annual growth rate (CAGR) of up to 22.10% . Course Page:  https://www.practical-devsecops.com/certified-devsecop...

In this episode, we dive deep into one of the most pressing financial and security threats facing organizations in 2026: Featured Resource: If you are responsible for securing AI infrastructure, this episode highlights the technical controls covered in the Certified AI Security Professional (CAISP) course , which includes hands-on labs for defending against the OWASP Top 10 LLM vulnerabilities and...

In this episode, we explore the remarkable career transformation of Hiroshi Tanaka , a security veteran with 15 years of experience in offensive security , penetration testing, and red team operations.  Despite his extensive background in a Fortune 500 company, Hiroshi realised that his ability to "break things" was no longer sufficient as his organisation transitioned towards DevOps and...

AI Security Certification and Training: https://www.practical-devsecops.com/certified-ai-security-professional/ To address these challenges, the Certified AI Security Professional (CAISP) certification provides the skills needed to secure the AI supply chain and infrastructure. The course covers: The emergence of Agentic AI represents a fundamental paradigm shift in cybersecurity. Unlike tradition...

This episode focuses on how these principles fit into the DevSecOps Maturity Model (DSOMM) , a structured framework that enables organisations to embed security practices from the start, ensuring that rapid delivery does not come at the cost of protection. Ready to take the first step? The Certified DevSecOps Professional (CDP)   course is the ultimate starting point for those looking to automate...

Secure your future in the most critical career path in tech by enrolling in the Certified AI Security Professional (CAISP) course today! In this episode, we explore the definitive guide to the Top 10 Emerging AI Security Roles for 2026 . The shift toward AI-integrated operations is not a future concern—it is happening now, and it has opened a "chasm" in the workforce that only specialise...

Enroll now in the Certified AI Security Professional (CAISP) course by Practical DevSecOps ! This highly recommended certification is designed for the engineers , focusing intensely on the hands-on skills required to neutralize AI threats before attackers strike.  The CAISP curriculum moves beyond theoretical knowledge, teaching you how to secure AI systems using the OWASP LLM Top 10 and implement...

The cybersecurity market is currently experiencing a massive talent shortfall in the emerging field of Artificial Intelligence security, driving compensation for specialized roles to unprecedented heights.  AI security roles are projected to pay between 180 K –280K in 2026 , but the majority of cybersecurity professionals lack the necessary qualifications,. We break down exactly what skills are co...

Cybercrime drains trillions of dollars globally each year. Today's threat landscape is defined by smart, adaptable adversaries: 40% of all cyberattacks use AI to find hidden weaknesses, and nearly all companies (93%) now face these advanced threats daily.  The Certified AI Security Professional (CAISP) course compresses the typical 2–4 years needed to become an AI Security Engineer into just...

Episode: Securing AI Systems - A Deep Dive into AI Security with Marudhamaran Gunashekaran   In this episode, Jeremy Daly , Cybersecurity Lead at Lumifi, sits down with Marudhamaran Gunashekaran , Principal Security Consultant and Lead Author of the Certified AI Security Professional (CAISP) course at Practical DevSecOps (a Hysn Technologies company).  What You'll Learn:   The conversation cu...

InfoSec Black Friday Deals 2025: Securing the Future of Cybersecurity This special offer broadcast details the InfoSec Black Friday 2025 deals, presenting a limited-time chance to advance cybersecurity careers when the demand for security professionals continues to grow.  Tune in to discover how to save up to $500 on certification bundles and receive 15% off all individual certifications .  Certif...

In this episode, we explore the rapid evolution of cybersecurity and the critical rise of a new specialisation: the AI Security Engineer. As artificial intelligence advances, it not only enhances our defensive capabilities but also introduces sophisticated new attack vectors that traditional security measures can't handle. AI Security Certification  -  Certified AI Security Professional (CAIS...

This episode delves into the critical field of AI Red Teaming , a structured, adversarial process designed to identify vulnerabilities and weaknesses in AI systems before malicious actors can exploit them . The Certified AI Security Professional (CAISP) course is specifically designed to advance careers in this field, offering practical skills in executing attacks using MITRE ATLAS and OWASP Top 1...

S ecurity isn't keeping pace with the swift advancements in AI and the explosion of cloud-native adoption. Many teams find themselves trying to mend broken pipelines with outdated AppSec playbooks , leading to significant vulnerabilities. This episode dives deep into how to bridge this critical gap, equipping you with the skills to truly defend modern systems. Ready to build these skills and...

Welcome to a crucial episode where we delve into the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) Framework , an exhaustive knowledge base designed to secure our increasingly AI-dependent world.  As AI and machine learning become foundational across healthcare, finance, and cybersecurity, protecting these systems from unique threats is paramount. Unlike MITRE ATT&...

Are you ready to face the escalating threat of AI attacks? AI system attacks are hitting companies every single day.  Hackers use AI tools to break into major banks and steal millions. It's a critical time for anyone in tech or cybersecurity to understand how to fight back. In this episode, we delve into why AI security is more crucial than ever in 2025. We reveal that 74% of IT security prof...