There is an increasing demand for people (and practices) to secure the entire DevOps space. Not only in tools, but throughout the very culture. It is hard. I r

There is an increasing demand for people (and practices) to secure the entire DevOps space. Not only in tools, but throughout the very culture. It is hard. I recommend looking into the ~newly named concept of SecDevOps - at its core it is about applying the engineering mentality into securing, hardening and enhancing the entire development-operations cycle. Lot of it is obvious. Even more of it is flat out boring. Practically none of it is new. In resilient systems, the gold standard people seem to aim for is chaos engineering: systems that behave correctly in the face of random failures, with the resilience exercised frequently. Well done security adds an additional aspect - that systems also behave correctly in the face of maliciously introduced inputs and/or failures.