Aug 30, 2022This is what you need to know if you want to become a Security Software EngineerIntroduction One of the most common questions that I receive when I teach some of my co-workers and students about security is “Where do I start?”, “What are the areas that I can work in the security field”, “Do I need a bachelor’s degree?”. Well, this is going to be a…Threat Intelligence8 min readThreat Intelligence8 min read
Jul 1, 2022Vault secrets as environment variablesIf you are a DevSecOps engineer working with Vault to provide a secure way to handle secrets and you are reading this post, then there are high chances that you have tried different solutions out there to inject environment variables without success. Do not worry. …Vault4 min readVault4 min read
Mar 27, 2022A deep dive into Vulnerability AnalysisIntroduction Vulnerability assessment plays a major role in providing security to any organization’s resources and infrastructure from various internal and external threats. We scan networks for known security weaknesses but attackers perform vulnerability analysis to identify security loopholes to further exploit that target network. To do properly secure your network and…Vulnerability11 min readVulnerability11 min read
Mar 22, 2022A software troubleshooting guide — Tips & TricksI’ve been a software engineer for more than 4 years now, on the last job I had, I was doing a kinda “software escalation engineer role” in which I had to be the lead of issues occurring in the production systems of our customers, train our team and also support…Troubleshooting6 min readTroubleshooting6 min read
Mar 22, 2022DNS resolution processDNS Terminology When we talk about DNS there are a lot of concepts that are always mentioned: TLD, FQDN, HOST, DOMAIN, SUBDOMAIN but what does that even mean? or how can this be easily understood? So, before starting with this deep dive, we will check the basic concepts of the DNS terminology…DNS4 min readDNS4 min read
Mar 13, 2022Public key infraestructure — PKIThe Public key infrastructure (PKI) is a framework (guideline) that consists of several security policies, communication protocols, and procedures to enable secure and trusted communication between different entities using public-key encryption. …Public Key Infrastructure6 min readPublic Key Infrastructure6 min read
Mar 9, 2022An overview of message brokersIntroduction The message brokers have earn a lot of popularity during the past years, some companies have been increasing the efforts to provide a message queuing solution and get a part of the cake. But what are message brokers / message queues? …Message Queue6 min readMessage Queue6 min read
Mar 8, 2022An overview of Threat Intelligence in CybersecuritySecurity is growing faster than ever, and some concepts need to be a must-know in order to be able to understand the security posture of our company. In this brief overview, I’ll explain what is Threat Intelligence, the importance, the frameworks and models, and some types! What is threat intelligence? If we google it…Security6 min readSecurity6 min read
Feb 2, 2022An overview of DevOps with TerraformHave you ever built from scratch your enterprise dev environment? Have you felt that the process of requesting VMs and dev environments must be automated to truly fulfill the DevOps life cycle? Well, with terraform we are able to achieve it. Terraform is an open-source tool developed by HashiCorp, and…Terraform5 min readTerraform5 min read
Jan 11, 2022An overview of application security (AppSec)Welcome to this brief overview to the application security, the objective is to attract developers who are interesting in developing secure apps and start their own road writing better and secure code. …Appsec11 min readAppsec11 min read
