I think that calling this a marriage between DevOps and SecOps is a serious misnomer. Traditionally, SecOps people are very IT oriented, and spend their time a

I think that calling this a marriage between DevOps and SecOps is a serious misnomer. Traditionally, SecOps people are very IT oriented, and spend their time auditing existing infrastructure for vulnerabilities using automated tools, watching for hostile network traffic, etc. Very little programming or application security knowledge is required, but lots of networking and IT knowledge is required. I assume that by SecOps, the OP is referring to Application Security Engineering. This field works much closer to the developers, has knowledge of how to build security into products, and usually has programming experience. This might seem like a nitpick, but the difference between SecOps people and AppSec people is big enough that if you were to hire the one for the other's job, you'd have a very bad time. I'm not sure what a more accurate name would be (AppSecOps? AppSecDevOps?), however calling it DevSecOps is too misleading.