Best DevSecOps Podcast Series Podcasts (2025)

1
Faith & Freedom: After Kirk - Justice Without Revenge 19:28

Play Pause

14d ago19:28

19:28

Send us a text October 14th, 2025: President Trump posthumously awards Charlie Kirk the Presidential Medal of Freedom. September 25th: State Department quietly revokes 47 visas for non-citizens who celebrated Kirk's assassination. Justice without revenge - that's the Christian balance we all need to understand. Five weeks after starting this podcas…

1
5 Essential Questions for Implementing the Software Acquisition Pathway and the Tools to Tackle Them 50:57

14d ago50:57

50:57

The SEI contributed its expertise to the development of the Software Acquisition Pathway (SWP), which the Department of Defense (DoD) issued in 2020 as DoD Instruction 5000.87. Since the SWP's issuance, SEI researchers have collaborated with DoD program teams and policy owners to effectively implement the pathway in different program contexts, iden…

1
Tech Deep Dive - When the Cloud Goes Dark: Observability After the AWS Outage 22:46

16d ago22:46

22:46

Send us a text Episode 9: When the Cloud Goes Dark - Observability After the AWS Outage Yesterday's AWS outage cost hundreds of billions and took down Snapchat, Coinbase, Ring, even Amazon's own retail site. 15+ hours of chaos exposed a critical truth: most organizations are doing observability completely wrong. THE RECEIPTS: - October 20, 2025, 3:…

1
Tech Deep Dive: Platform Engineering - The DevOps Evolution 38:03

23d ago38:03

38:03

Send us a text Platform Engineering isn't just another buzzword—it's the evolution that makes DevOps, DevSecOps, and SRE practices actually scale across entire organizations. In this episode, Scott shares a real story from a scrum call where a simple code formatting mistake became the catalyst for building automated systems that eliminate toil fore…

1
Q-Day Countdown: Are You Prepared? 48:33

27d ago48:33

48:33

Experts agree that quantum computing will likely become powerful enough to break modern-day encryption within the next 10–15 years on "Q Day." Once encryption is defeated, the computing world will never be the same. Organizations need to identify the correct courses of action to take today so that the sudden onset of quantum computing does not thre…

1
Welcome to the ISC2 CISSP Audio Course 1:45

23d ago1:45

1:45

Dive into a fast, no-fluff overview of what this podcast delivers, who it’s for, and how each episode helps you level up with practical, real-world takeaways. In this trailer, you’ll hear the show’s promise, the format you can expect, and a sneak peek at the kinds of stories, tips, and expert insights coming your way. Hit follow to get new episodes…

1
ePlus Security & F5 API Security Podcast - Episode 4 7:40

27d ago7:40

7:40

Episode 4: Security as Code In this episode of the ePlus Security + F5 API Security Podcast, David Tumlin and Chuck Herrin dive into the future of "security as code," where automation, AI, and DevSecOps converge to protect dynamic, ephemeral environments. From real-time threat validation to AI-assisted policy tuning, this is a must-listen for anyon…

1
Faith & Freedom: Apple vs. the Sabbath - When 'Inclusion' Excludes Faith 22:54

1M ago22:54

22:54

Send us a text Apple vs. the Sabbath: When "Inclusion" Excludes Faith | Faith & Freedom #7 The EEOC just filed a federal lawsuit that exposes Big Tech's double standard: diversity for everything except genuine religious conviction. THE CASE (WITH RECEIPTS): On September 30, 2025, the Equal Employment Opportunity Commission filed a federal lawsuit a…

1
Tech Deep Dive: Building Bridges, Not Walls: Multi-Cloud Native Design 31:04

1M ago31:04

31:04

Send us a text Real enterprise multi-cloud architecture from 20+ years in the trenches. AWS, Azure, GCP - when to use each, how to bridge them, and why most organizations fail at multi-cloud. THE RECEIPTS (Sources & Facts): Scott's credentials: Google Cloud PSO, AWS ProServe, consulting with McKinsey, PWC, Deloitte on Fortune 500 transformations AW…

1
From the Free State - Tampa's Conservative Awakening 16:24

1M ago16:24

16:24

Send us a text Seven thousand students worshipping Jesus at USF while a UT professor mocks prayer for the President. Three hundred baptisms versus profanity in the classroom. This is the battle for Tampa's soul. After watching Raleigh fall to liberal migration for 12 years, I moved to the Free State of Florida to help build what America can become.…

1
Using LLMs to Evaluate Code 1:02:10

1M ago1:02:10

1:02:10

Finding and fixing weaknesses and vulnerabilities in source code has been an ongoing challenge. There is a lot of excitement about the ability of large language models (LLMs, e.g., GenAI) to produce and evaluate programs. One question related to this ability is: Do these systems help in practice? We ran experiments with various LLMs to see if they …

1
Faith & Freedom: Big Tech's Confession - YouTube Censorship Exposed & TikTok's Future 18:14

1M ago18:14

18:14

Send us a text Google admits Biden administration pressured YouTube to censor content that didn't violate policies. In this explosive Faith & Freedom episode, we unpack Google's September 23rd confession to Congress, the shadowbanning of conservative voices, and what the Oracle-led TikTok restructuring means for free speech in tech. Plus, my person…

1
Tech Deep Dive: Kubernetes Like a Sailor | Military Precision Meets Container Orchestration 23:38

1M ago23:38

23:38

Send us a text Former Navy Engineman Scott W Houghton transforms a real pirate attack on the USS Ashland into the most memorable Kubernetes lesson you'll ever hear. Drawing from his experience during the April 10, 2010 engagement in the Gulf of Aden, Scott parallels naval operations with container orchestration, making complex DevSecOps concepts cr…

1
Faith & Freedom Special: The Muslim Question - Setting the Record Straight 12:27

2M ago12:27

12:27

Send us a text Scott interrupts his regular production schedule to address concerning comments about targeting Muslims following Florida's Operation One Way Ticket. Drawing from his Navy service alongside Muslim allies and presenting hard data on radical Islamic terrorism, he makes the crucial distinction between peaceful Muslims practicing their f…

1
Special Episode - Faith & Freedom - From the Free State "Alligator Justice: Florida's Bold Stand for Law and Order" 15:12

2M ago15:12

15:12

Send us a text 🚨 SPECIAL FLORIDA EDITION: From the Free State comes a powerful examination of law, order, and liberty. This week's Central Florida operation detained 354 illegal immigrants in just 4 days, while Florida builds "Alligator Alcatraz" and expands ICE partnerships by 577% since January. Scott Houghton broadcasts from Tampa with hard fact…

1
Tech Bites: LLMs Unmasked - The AI Truth Bomb 13:59

2M ago13:59

13:59

Send us a text Scott breaks down Large Language Models (LLMs) in plain English – super-powered autocomplete that's changing everything. Compare Claude Opus 4.1, ChatGPT 5, Grok 4, Gemini, and Microsoft Copilot from someone who uses them all professionally. Learn why "AI won't replace people, but people using AI will replace those who don't" applies…

1
AI Hype vs. Reality. Real Stats from Laura Tacho, CTO of DX 1:19:23

2M ago1:19:23

1:19:23

Bret and Nirmal are joined by Laura Tacho, CTO at DX and long-time friend of the show, to discuss AI usage and success in teams adopting AI and Agents to generate code and perform tasks. 🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to a…

1
Tech Deep Dive: "DevSecOps and Discipline" 28:35

2M ago28:35

28:35

Send us a text Tech Deep Dive: DevSecOps and Discipline - Show Notes Where security principles meet spiritual discipline - because the same practices that protect our systems can protect our souls. Scott Houghton (20+ years in tech, contractor for Google Cloud PSO, AWS ProServe, Fortune 500s) breaks down how DevSecOps isn't just about securing infr…

1
Faith & Freedom: The Charlie Kirk Effect 19:06

2M ago19:06

19:06

Send us a text Faith, Freedom & Tech Episode 3: The Charlie Kirk Effect - Show Notes Episode 3: The Charlie Kirk Effect - Gen Z's Return to Traditional Values September 25, 2025 Two weeks after Charlie Kirk's assassination at Utah Valley University, we're witnessing a global youth revolution. From 100,000+ protesters in London chanting "We are Char…

1
Intro: Finding My Voice Again 18:51

2M ago18:51

18:51

Send us a text After 20+ years of hiding his faith and conservative values in tech, Scott Houghton is done being silent. In this raw, unfiltered premiere episode of Faith, Freedom & Tech, Scott shares: Why watching Charlie Kirk die for his beliefs changed everything The real cost of being a Christian in Silicon Valley How he went from hacking schoo…

1
ePlus Security & F5 API Security Podcast: Episode 3 7:55

2M ago7:55

7:55

Episode 3: Increased Adoption of AI and Machine Learning In this episode, ePlus' David Tumlin and F5's Chuck Herrin break down how the AI boom is reshaping API security—and why skipping visibility is a risk you can't afford. Learn about the blind spots you'll face if you forgo API security and don't have your API ecosystems under control.…

1
Achieving Balance: Agility, MBSE, and Architecture 42:55

3M ago42:55

42:55

Often, agile implementations are a struggle. Dedicated agile teams focus hard and deliver value on a regular cadence. But when results are tallied, the value teams produce may not fit neatly into the expectations of senior stakeholders. Why? In this webcast, Peter Capell addresses the importance of a practical vision to express outcomes, so that th…

1
My Favorite AI Terminal, Prompt Injection, and More 29:24

3M ago29:24

29:24

In this episode, I walk though some of my favorite new AI tools and content. 🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more …

1
AWS Agentic DevOps with the EKS MCP Server 1:00:21

4M ago1:00:21

1:00:21

Bret and Nirmal are joined by Rajdeep Saha from AWS to discuss AI agents and the MCP (Model Context Protocol) standard. In this episode, they explore how AI can manage infrastructure with ease and demonstrate creating Kubernetes clusters with a single prompt. 🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in …

1
Identifying AI Talent for the DoD Workforce 1:01:42

4M ago1:01:42

1:01:42

Finding and growing AI and Data talent is essential for mission success, but many skilled workers remain unseen because they lack traditional credentials. This session introduces practical strategies and prototype tools that help individuals demonstrate what they know while helping managers identify and evaluate emerging talent in these fields. Att…

1
ePlus Security + F5 API Security Podcast Series - Episode 2 5:31

4M ago5:31

5:31

In this episode, ePlus' David Tumlin and F5's Chuck Herrin discuss how securing modern applications isn't just about tools—it's about people. Hear how ePlus and F5 are helping organizations break down silos and build secure, scalable systems—together.By David Tumlin, ePlus and Chuck Herrin, F5

1
Agentic CI/CD with Solomon Hykes of Dagger 1:17:57

4M ago1:17:57

1:17:57

Bret and Nirmal discuss the intersection of AI agents and DevOps with Solomon Hykes, co-founder of Dagger and Docker. Solomon introduces Container Use, an open-source MCP server that gives coding agents isolated, containerized environments to work in, solving the critical problem of agents interfering with each other when running on the same system…

1
Model Your Way to Better Cybersecurity 1:02:54

4M ago1:02:54

1:02:54

Threat modeling is intended to help defend a system from attack. It tops the list of techniques recommended by the National Institute of Standards and Technology (NIST) to secure critical systems. In a world where people with malicious intent have deadlier tools at their disposal, defenders need to take advantage of Model-Based Systems Engineering …

1
Running AI MCP Tools on Kubernetes with kagent 42:44

4M ago42:44

42:44

Bret and Nirmal explore AI agents in Kubernetes with Eitan Yarmush, Senior Architect at Solo.io. Eitan explains how AI agents work through three simple components (system prompts, LLMs, and tools), and demonstrates the kagent project, which provides a Kubernetes-native way to deploy and manage AI workflows. 🙌 My next course is coming soon! I've ope…

1
Episode 1: The Evolution of API Security, Shift Left Security and DevSecOps Integration 16:54

4M ago16:54

16:54

ePlus Security + F5 API Security Podcast Series where ePlus' David Tumlin and F5's Chuck Herrin share why visibility is the foundation of modern security—and how together, ePlus & F5 are helping organizations manage the real challenges of API security in today's hybrid, multi-cloud world.By David Tumlin, ePlus and Chuck Herrin, F5

1
DevSecOps: See, Use, Succeed 1:00:41

5M ago1:00:41

1:00:41

DevSecOps generates a lot of data valuable for better decision making. However, decision makers may not see all they need to in order to make best use of the data for continuous improvement. The SEI open source Polar tool unlocks the data, giving DevSecOps teams greater capability to automate, which in turn means they can innovate rapidly – without…

1
Episode 140: What to Do If You Fail the CISSP 7:22

5M ago7:22

7:22

Not everyone passes on the first try—but failure doesn’t define your journey. In this episode, we guide you through a structured plan for recovery if you don’t pass the CISSP exam. We cover how to interpret your exam feedback, identify weak domains, revise your study strategy, and rebuild confidence. You’ll also learn how to maintain momentum and a…

1
Episode 139: What Comes After the CISSP: Career and Certification Roadmap 8:01

5M ago8:01

8:01

Earning your CISSP opens new doors—but where you go next depends on your goals. In this episode, we explore the post-CISSP landscape, including leadership roles like CISO, and technical specializations like cloud security and digital forensics. We also review advanced certifications such as CCSP, CISM, CRISC, and the CISSP concentrations in archite…

1
Episode 138: Adaptive Testing Tips and Time Management 8:36

5M ago8:36

8:36

The CISSP exam uses Computerized Adaptive Testing (CAT), which means question difficulty and test length vary based on your performance. In this episode, we demystify the CAT format, explain how scoring works, and share strategies to manage your time across the exam. You’ll learn when to move quickly, when to slow down, and how to pace yourself und…

1
Episode 137: Understanding "Best", "First", and "Most Likely" Wording 8:16

5M ago8:16

8:16

CISSP exam questions often hinge on a single word that changes everything. In this episode, we examine how to interpret qualifiers like “best,” “first,” “most appropriate,” and “least likely.” We explain what each prompt is asking you to consider—whether it’s prioritization, sequencing, or judgment—and how to choose the answer that aligns with ISC2…

1
Episode 136: How to Deconstruct CISSP Questions 7:47

5M ago7:47

7:47

CISSP exam questions are known for being complex, layered, and sometimes intentionally confusing. In this episode, we teach you how to break questions apart to find the real point being tested. You'll learn how to identify the scenario, isolate the question stem, and evaluate answer choices using elimination strategies. We also discuss common distr…

1
Episode 135: Memory Tricks and Mnemonics for the CISSP 7:52

5M ago7:52

7:52

With so much material to retain, memory tools are a CISSP candidate’s secret weapon. In this episode, we provide proven mnemonics, visual associations, and acronym expansions to help you remember everything from the OSI model and CIA triad to the phases of incident response and risk treatment options. You’ll also learn strategies for reducing cogni…

1
Episode 131: Top 10 Hardest CISSP Concepts Demystified 9:31

5M ago9:31

9:31

Some CISSP topics consistently challenge even experienced professionals. In this episode, we break down ten of the most difficult concepts on the exam—ranging from cryptographic key lifecycle and security models to risk calculations and legal frameworks. We clarify the nuances, provide examples, and share memory aids to help you master these areas.…

1
Episode 130: DevSecOps Culture and Continuous Assurance 10:42

5M ago10:42

10:42

DevSecOps is not just a toolset—it’s a culture that integrates security into every phase of the software development lifecycle. In this episode, we explore how DevSecOps breaks down silos between development, operations, and security teams. Topics include automated security testing, continuous compliance checks, secure coding training, and real-tim…

1
Episode 129: Secure APIs and Service Integration 10:23

5M ago10:23

10:23

APIs enable system integration but can expose your infrastructure to serious vulnerabilities if not secured properly. This episode focuses on how to design and manage secure APIs. We cover authentication methods (API keys, OAuth), input validation, rate limiting, logging, and error handling. You’ll also learn about common API security issues like b…

1
Episode 128: Mobile Application Security and Reverse Engineering 10:12

5M ago10:12

10:12

Mobile apps introduce unique risks due to their widespread use, diverse platforms, and limited control over user devices. In this episode, we explore mobile app security concerns, including insecure storage, weak authentication, exposed APIs, and code tampering. We also introduce reverse engineering concepts—how attackers decompile apps to uncover …

1
Episode 127: Application Whitelisting and Sandboxing 10:10

5M ago10:10

10:10

Not all applications should be allowed to run in your environment. This episode explores application control mechanisms like whitelisting and sandboxing. You'll learn how whitelisting enforces control by allowing only approved executables, and how sandboxing isolates applications to prevent them from affecting system integrity. We also discuss impl…

1
Episode 126: Version Control and Code Integrity 9:52

5M ago9:52

9:52

Version control systems track changes to code—but they also need to be protected themselves. This episode explores how tools like Git help enforce code integrity, collaboration, and traceability across development teams. We cover commit histories, branching strategies, and how to detect unauthorized or malicious changes. You’ll learn about tagging,…

1
Episode 125: Configuration Management and CI/CD Pipelines 10:27

5M ago10:27

10:27

Secure development doesn't stop at writing code—it includes how that code is built, tested, and deployed. In this episode, we explore configuration management and continuous integration/continuous delivery (CI/CD) pipelines. We discuss how insecure configurations, exposed secrets, and unmonitored automation can lead to compromise. Topics include in…

1
Episode 124: Code Repositories and Access Controls 9:53

5M ago9:53

9:53

Source code repositories are central to modern software development—and to software security. This episode covers the security considerations for using platforms like GitHub, GitLab, Bitbucket, and internal repositories. We examine access control policies, branching strategies, commit tracking, and how to detect malicious code changes. You’ll learn…

1
Episode 123: Security Testing: SAST, DAST, IAST 10:51

5M ago10:51

10:51

Security testing helps ensure software behaves as intended under hostile conditions. In this episode, we explore different application security testing methodologies, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Interactive Application Security Testing (IAST). We explain how each method work…

1
Episode 122: Buffer Overflows, SQL Injection, and Common Flaws 10:37

5M ago10:37

10:37

Many devastating cyberattacks originate from well-known coding flaws. This episode examines classic vulnerabilities including buffer overflows, SQL injection, and other input-related attacks. We explain how these issues arise, what they allow attackers to do, and how to defend against them using secure coding, bounds checking, input validation, and…

1
Episode 121: OWASP Top 10 Threats and Controls 10:59

5M ago10:59

10:59

The OWASP Top 10 is a widely recognized list of the most critical security risks to web applications. In this episode, we walk through each entry—from injection and broken authentication to cross-site scripting, insecure deserialization, and insufficient logging. You'll learn how these vulnerabilities occur, the business impact they can have, and t…

1
Episode 120: Input Validation and Output Encoding 11:11

5M ago11:11

11:11

User input is one of the most common vectors for exploitation in modern applications. In this episode, we focus on two critical programming techniques: input validation and output encoding. We explain how to validate input to ensure it meets expected formats and prevents attacks like SQL injection and cross-site scripting (XSS). We also explore how…

1
Episode 119: Secure Design and Secure Coding Guidelines 11:49

5M ago11:49

11:49

Secure applications start with secure design. In this episode, we explore how to incorporate security into architecture and code from the very beginning. Topics include threat modeling, input validation, secure defaults, and fail-safe mechanisms. We also cover secure coding practices that prevent common vulnerabilities such as injection, buffer ove…