CISA's Aeva Black and the Public Sector View of Open Source Security

What's in the SOSS? An OpenSSF Podcast

In this episode, Omkhar Arasaratnam visits with Aeva Black, who currently serves as the Section Chief for Open Source Security at CISA, and is an open source hacker and international public speaker with 25 years of experience building open source software projects at large technology companies.
She previously led open source security strategy within the Microsoft Azure Office of the CTO, and served on the OpenSSF Technical Advisory Committee, the OpenStack Technical Committee, and the Kubernetes Code of Conduct Committee. In her spare time, Aeva enjoys riding motorcycles up and down the west coast.

• 01:37- Aeva describes a day in the life at CISA
• 02:38 - Details on the use of open source in the public sector
• 04:27 - Why open source needs corporate investment to maintain security
• 06:20 - Aeva shares what their second year at CISA looks like
• 07:58 - Aeva answers Omkhar’s rapid-fire questions
• 09:28 - Advice for people entering the world of security
• 10:16 - Certs are nice to have, but they aren’t everything
• 10:42 - Aeva’s call to action for listeners

Episode links:

• Aeva Black on LinkedIn
• CISA Open Source Security Roadmap
• Get involved with the OpenSSF community