DevSecOps Working Group
Implementing DevSecOps integrates security into every phase of the software development lifecycle, emphasizing the importance of cross-functional collaboration. Lessons learned from early adopters highlight the necessity of fostering a security-first mindset, investing in continuous education, and leveraging automated tools to streamline security practices.
The working group will examine DevSecOps from a holistic and technical perspective of the following topics:
- Critical components of launching a successful DevSecOps program from the ground up, focusing on the integration and importance of change management and workplace culture, and agile methodologies.Â
- The next wave of DevSecOps, highlighting the role of MLOps, automation in delivery, and the creation of fast feedback loops.Â
- The transformative impact of AI in DevSecOps, including expected improvements in security measures and root cause analysis.Â
- Essential security best practices to ensure robust and resilient software development.
Leadership Chairs:

Spence Spencer
Government Co-Chair
Director, System Configuration & Delivery Automation Division
U.S. Patent and Trademark Office

Graham Baggett
Government Co-Chair
Chief
U.S. Census Bureau

Steven Terhar
Industry Co-Chair
Senior Manager, Customer Success
GitLab

Antoine Harden
Industry Co-Chair
Regional Vice President, Federal Sales
Sonatype

Hasan Yasar
FFRDC Chair
Technical Manager & Adjunct Faculty Member
Carnegie Mellon University

Rich Savage
Carahsoft Chair
Sales Director – Open Source Team Manager

Kevin Howard
Carahsoft Vice Chair
Senior Enterprise Account Manager