Loading...

PODCAST

Practical DevSecOps

Practical DevSecOps Team

Practical DevSecOps is a global cybersecurity education company specializing in hands-on DevSecOps, AI Security, and Application Security training and certifications.Listed on the NICCS/CISA National Initiative for Cybersecurity Careers and Studies platform, Practical DevSecOps has trained over 12,500 security professionals across 108+ countries and is trusted by organizations including Roche, Accenture, IBM, PWC, and Booz Allen Hamilton.𝗪𝗵𝗮𝘁 𝗪𝗲 𝗢𝗳𝗳𝗲𝗿Our certification programs are built

education courses

All Episodes

22:04

Guarding the AI Software Supply Chain - Product...

Practical DevSecOps ·

2026/09/30

we explore key insights from the State of Product Security Roles: 2026 Research Report. As AI-generated code and autonomous AI agents transform software production, product security is shifting from narrow application scanning to full lifecycle protection. We break down how top organizations are navigating severe talent shortages, structuring modern security teams, and securing the AI supply chain.What You’ll Learn in This Episode:The 2026 Skills Shortage: Why 59% of security leaders report a

en-us

8:08

Top AI Certifications for 2026: CAISP vs SecAI+ vs AAIS

Practical DevSecOps ·

2026/09/14

Certified AI Security Professional (CAISP), CompTIA SecAI+, and ISACA AAISM represent the premier credentials competing for cybersecurity professionals in 2026 as demand for AI security roles surges. In this episode, we break down how these certifications stack up for engineers looking to defend real-world production stacks against novel AI vulnerabilities. With job postings requiring AI security skills doubling and red-teaming roles projected to grow by 35%, choosing the right certification pathway

en-us

21:32

AI Security Skills: What to Learn in 2027 | AI...

Practical DevSecOps ·

2026/09/04

Ready to secure your career in 2027? Enroll in the Certified AI Security Professional (CAISP) course today. This vendor-neutral, fully lab-based certification from Practical DevSecOps is trusted by global organizations like IBM, Accenture, and PwC. It offers over 30 browser-based labs and a rigorous six-hour practical exam to prove you can actively secure real AI architectures.In this episode of the podcast, we dive into the exact skills you need to stay ahead of the curve as AI-driven systems take

en-us

5:27

Battle of the AI Red Team Certifications: CAISP vs....

Practical DevSecOps ·

2026/08/14

In this episode, we dive deep into the field of AI security to compare the top three AI red teaming certifications of 2026: Practical DevSecOps' Certified AI Security Professional (CAISP), OffSec's AI Red Teamer (OSAI/AI-300), and SANS's SEC536 (Adversarial AI). Whether you are an experienced pentester or an AppSec engineer looking to pivot into securing LLMs, we break down exactly what you get for your money, contrast the intensity of their practical labs against their exam formats,

en-us

21:34

Best Application Security Courses Compared 2026 -...

Practical DevSecOps ·

2026/07/14

In this episode, we break down the 2026 application security space to help you decide which training path actually moves the needle for your career. The central theme of our discussion is a critical choice every professional faces: are you looking to build hands-on skills you can use on Monday morning, or are you looking for a credential to bolster your resume?We explore the certifications that hiring managers and AppSec leads are prioritizing this year, with a heavy focus on practical, lab-based

en-us

22:06

Elite Pay for MCP Security Experts: Mastering the AI...

Practical DevSecOps ·

2026/06/29

As organizations rapidly adopt the Model Context Protocol (MCP) to connect AI agents to production data and internal tools, a massive security gap has emerged. In this episode, we explore why MCP security has become one of the fastest-rising hiring signals in the cybersecurity industry and how mastering these skills can dramatically increase your salary potential.Featured Resource: Learn more about the Certified MCP Security Expert (CMCPSE) course by Practical DevSecOps, focusing on attacking,

en-us

20:27

MCP Security Best Practices 2026 - Certified MCP...

Practical DevSecOps ·

2026/06/05

The high-speed adoption of AI agents has a new "default" language: The Model Context Protocol (MCP). While MCP provides a seamless way for Large Language Models (LLMs) to interact with tools, databases, and APIs, it has also introduced significant new attack surfaces. In this episode, we break down the MCP Security Best Practices: 2026 Playbook to help security engineers and developers move beyond theory and into hardened, production-ready defense.What’s at Stake?Recent research has

en-us

21:57

Building a Resilient MCP Security Program for...

Practical DevSecOps ·

2026/05/26

In this episode, we dive into the "MCP Security Risk Framework for Enterprise CISOs", exploring how to secure AI agents against the unique threat of agentic amplification. Ready to lead your organisation’s AI security strategy? Upskill your team with the Certified MCP Security Expert (CMCPSE) course, featuring over 30 hands-on labs to attack, defend, and pen test MCP serversUnlike standard API risks, which are bounded to specific data or functions, MCP risks are non-linear because a single

en-us

20:28

OWASP MCP Top 10: 2026 Security Framework and MCP...

Practical DevSecOps ·

2026/05/06

In this episode, we dive deep into the OWASP MCP Top 10, the first official security framework dedicated to the Model Context Protocol (MCP). Ready to lead your team’s AI security strategy and bridge the skills gap?Enroll in the Certified MCP Security Expert (CMCPSE) Course today!Get hands-on experience in tool poisoning labs, OAuth 2.1 hardening, MCP red-teaming, and shadow server detection. This is the definitive certification to secure agentic AI in 2026.This framework addresses a critical shift

en-us

21:47

Navigating the Path to Application Security Manager...

Practical DevSecOps ·

2026/04/24

Transitioning from a technical engineer to an Application Security (AppSec) Manager is rarely a straight line; it requires balancing technical expertise with the strategic mindset needed to lead a department. In this episode, we break down the realistic 5–8 year career path for aspiring leaders, moving from hands-on development to managing end-to-end security programs. We dive into the "messy reality" of the role, where you must act as the bridge between fast-moving engineering teams and

en-us

19:49

DevSecOps Certification Guide: CDP vs. ECDE...

Practical DevSecOps ·

2026/04/03

Welcome to The DevSecOps Edge, the podcast dedicated to helping you become one of the top 1% of cybersecurity engineers in the industry. In a world where APIs account for 80% of internet traffic and 94% of web breaches start at the API layer, staying ahead of the curve isn't just an advantage—it's a necessity.In our featured episodes, we tackle the biggest questions facing security professionals today. Our deep-dive comparison, "CDP vs. ECDE: Which DevSecOps Certification Is Worth

en-us

20:42

Exploiting Hidden Endpoints and Centralizing Defense...

Practical DevSecOps ·

2026/03/20

Is your API documentation telling the truth? In this episode, we dive into the uncomfortable reality that API documentation is often a "lie" because of the gap between Swagger files and what is actually running in production. We explore how attackers exploit this gap using advanced fuzzing techniques and JWT manipulation, and why a centralised defense strategy using Kong API Gateway is the only way to effectively secure modern microservices.Key Topics Covered:The JWT Illusion: We debunk

en-us

22:27

CAISP vs. OSAI Certification Comparison Guide

Practical DevSecOps ·

2026/03/05

n this episode, we tackle the rapidly evolving landscape of artificial intelligence and the critical need for specialized security expertise. As Large Language Models (LLMs) and autonomous agents become integrated into the modern enterprise, they bring a new set of risks, including prompt injection, training data poisoning, and insecure plugin designs. To help you navigate your career path in this high-demand field, we provide an in-depth comparison of two premier certifications: the Certified AI

en-us

22:46

SLSA Framework: The Definitive Guide for Securing...

Practical DevSecOps ·

2026/02/28

In this episode, we dive deep into the SLSA (Supply-chain Levels for Software Artifacts) framework, the definitive standard for securing your software supply chain. With software supply chain attacks increasing by 742% between 2019 and 2022, understanding frameworks like SLSA—pronounced "salsa"—is no longer optional; it is an operational reality.We explore the origins of SLSA, which began at Google as "Binary Authorization for Borg" before being contributed to the Open Source

en-us

15:47

DevSecOps Statistics in 2026: Market Growth, Adoption...

Practical DevSecOps ·

2026/02/20

In this episode, we explore the explosive growth of the DevSecOps market, which is projected to reach between USD 8.58 billion and USD 10.88 billion by 2026. Driven by cloud-native transitions, AI integration, and intensifying regulatory pressures, the industry is witnessing a compound annual growth rate (CAGR) of up to 22.10%.Course Page: https://www.practical-devsecops.com/certified-devsecops-professional/What You’ll Learn in This Episode:• The Financial Landscape: Why DevSecOps engineering has

en-us

13:23

LLM Jacking – The $46,000-a-Day Security Threat

Practical DevSecOps ·

2026/02/09

In this episode, we dive deep into one of the most pressing financial and security threats facing organizations in 2026:Featured Resource: If you are responsible for securing AI infrastructure, this episode highlights the technical controls covered in the Certified AI Security Professional (CAISP) course, which includes hands-on labs for defending against the OWASP Top 10 LLM vulnerabilities and mastering the MITRE ATLAS framework.LLM Jacking. While many security discussions focus on prompt

en-us

14:37

Breaking the Cycle: From Red Teaming to DevSecOps...

Practical DevSecOps ·

2026/01/22

In this episode, we explore the remarkable career transformation of Hiroshi Tanaka, a security veteran with 15 years of experience in offensive security, penetration testing, and red team operations. Despite his extensive background in a Fortune 500 company, Hiroshi realised that his ability to "break things" was no longer sufficient as his organisation transitioned towards DevOps and cloud-native development.He shares his candid journey of overcoming the fear of becoming

en-us

12:38

Agentic AI Security Threats, Defenses, Evaluation &...

Practical DevSecOps ·

2026/01/13

AI Security Certification and Training:https://www.practical-devsecops.com/certified-ai-security-professional/To address these challenges, the Certified AI Security Professional (CAISP) certification provides the skills needed to secure the AI supply chain and infrastructure. The course covers:The emergence of Agentic AI represents a fundamental paradigm shift in cybersecurity. Unlike traditional, static software, agentic systems are defined by their autonomy, planning capabilities, and ability to

en-us

17:01

Navigating the DSOMM Roadmap and the DevSecOps...

Practical DevSecOps ·

2026/01/06

This episode focuses on how these principles fit into the DevSecOps Maturity Model (DSOMM), a structured framework that enables organisations to embed security practices from the start, ensuring that rapid delivery does not come at the cost of protection.Ready to take the first step?The Certified DevSecOps Professional (CDP) course is the ultimate starting point for those looking to automate security and lead organisational change. Through 100+ hands-on labs, the CDP program teaches you to build

en-us

15:44

Top 10 Emerging AI Security Roles in 2026

Practical DevSecOps ·

2025/12/24

Secure your future in the most critical career path in tech by enrolling in the Certified AI Security Professional (CAISP) course today!In this episode, we explore the definitive guide to the Top 10 Emerging AI Security Roles for 2026. The shift toward AI-integrated operations is not a future concern—it is happening now, and it has opened a "chasm" in the workforce that only specialised professionals can fill. We break down the responsibilities, required skills, and massive salary

en-us

36 results

Similar Podcasts

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Edutainment Learning

Ralph Krauss

Education Futures

Svenia Busson & Laurent Jolie

Out In The Hall

NHSA