Application security is a problem in the development world, with expensive, complex, and sometimes only piecemeal solutions. But fix the problems you must, as there will come a time when someone will try to hack your app, probably (hopefully) your security team or a penetration tester. Once they find those problems, you have to then go back and fix the security bugs, 6 months to a year later, and that can be a real pain.

In this talk, you’ll learn how to turn this issue on its head, with unit security testing. Unit security testing is a tool we developed here at Bright to solve the problem of needing to rely on an external tool or team instead of being self-reliant in your approach to writing secure code. By integrating our DAST engine with unit tests, you, the developer, are empowered with the know-how of how to find vulnerabilities as early as possible in the SDLC, without the security team getting involved and having to fix problems far later on in the process.

In this session, you will learn
How to integrate unit security tests in your JavaScript applications (other language support coming soon!) using Bright, Jest & Nest.js
How to write different types of tests and which issues are important to test for
How to fix some vulnerabilities that our tests find in an example web application

An ounce of prevention is worth a pound of cure, so you will also learn how to defend against some common attacks from the get-go as you are writing code. 

Technical aptitude will take an engineer far in their career but ultimately it's the ability to navigate workplace environments through the refinement of soft skills that will determine the heights that your career can scale.

In this session, Vanky Kataria (Evangelist - Global Communities) will share how focusing on soft skills can play an instrumental role in your career development and explain how engineers benefit from thinking about their workplaces beyond their roles and responsibilities as technical professionals.