a Futurum company
Subscribe
Waqas Nazir

Contributing Writer

Waqas Nazir

Waqas Nazir is CEO of DigitSec. Before founding DigitSec, Waqas served as the Chief Application Security Auditor for Coalfire Systems. He has worked as an information security consultant for multiple Fortune 100 companies including Microsoft, JP Morgan Chase, and Salesforce. His expertise includes code reviews, black-box assessments, product reviews, and custom tools development. Waqas collaborated with Microsoft Research in the development of a static code analysis tool used for identifying software vulnerabilities and was featured in Microsoft’s Information Security Newsletter. Waqas has also been credited with the discovery and disclosure of vulnerabilities in many tech products including Google & Apple.

3Articles shown
ContributorDevOps.com
𝕏in✉
Beats
Blogsdevsecopssecure code reviewapplication securitycode scanningCloud Security

Latest from Waqas

Blogs

Avoiding Security Review Delays

In the summer of 2021, I had lunch with a senior security developer at one of Seattle’s leading tech firms. Even though we were relaxed in the sunny and cool afternoon of the Pacific Northwest, there was no doubt my friend was frustrated. Part of his job was running code through a popular scanning product […]

Aug 16, 2022 · 3 min

All articles by Waqas Nazir

Showing 1–3
Blogs

Turning Off DevSecOps Noise for Functional Fidelity

Analyzing the DevOps and DevSecOps software marketplace demonstrates the high demand for tools and platforms that reduce false positives. As businesses and organizations adopt a rigorous, disciplined software development life cycle and ascribe to strict compliance frameworks, they quickly realize that automated tools can generate a substantial amount of noise, in the form of false […]

3 min
Blogs

Understanding SaaS Security for DevOps

As Software-as-a-service (SaaS) and DevOps adoption grew, new teams were formed to address emerging security challenges. Traditional solutions weren’t built to detect the new vulnerabilities in the cloud and created excessive noise for an already stressed pool of resources. The combination of emerging zero-day vulnerabilities and an avalanche of false-positives ends up increasing security […]

3 min