Talks & workshops.
Workshops and talks on DevSecOps, Platform Engineering, and secure AI adoption in software development — at IT-Tage Frankfurt and heise Academy.
DevSecOps – Agile Security in Software Development
Full-day workshop at IT-Tage 2025 in Frankfurt am Main (23 June 2025, 09:00–16:00), co-delivered with Andreas Falk. Covers the complete DevSecOps landscape hands-on: DevOps fundamentals and value streams, the DevSecOps framework, application and container security, vulnerability management, secret management, secure CI/CD pipelines, Infrastructure as Code, SBOM and supply-chain security, observability, and incident management. The goal: establishing security not as a bottleneck, but as an integral part of modern software delivery.
together with Andreas Falk
DevSecOps and AI – Secure Software Development in the Age of Artificial Intelligence
Classroom course at heise Academy, co-delivered with Andreas Falk, across four sessions (November 6, 13, 20, and 27, 2025): discovering the synergies between DevSecOps and AI, integrating AI-assisted security into the DevOps pipeline, building a secure value-stream supply chain across DevOps/CI/CD/observability, and IT security with AI from prevention to reporting. The course shows how DevSecOps practices and AI tooling complement each other — and where AI introduces new security risks: blind spots in classical SAST tools for AI-generated code, hallucinated package names as supply-chain attack surfaces, prompt injection in CI/CD pipelines. Actionable guidance for teams already using AI coding assistants in production.
together with Andreas Falk
DevSecOps – Agile Security in Software Development
Three-part webinar series at heise Academy, co-delivered with Andreas Falk (May 14, May 28, and June 11, 2024, 09:00–13:00 each): DevSecOps fundamentals, security in the DevOps process, and DevSecOps as a secure value-stream supply chain. The series shows how to weave security seamlessly into agile development — from application and cloud security to security testing, vulnerability management, CI/CD pipelines, and secret management.
together with Andreas Falk