My name is Megan O'Neil, I'm a Cloud Security Leader. I've been in cybersecurity since 2004, in various security roles. On my blog I share what I've been working on and other security related content.
Join me tomorrow for a discussion with the amazing Starbucks Platform team, Ross Abbott and D. Ryan Hild as we talk security, devops, engineering and coffee! This team has great insights to share on their approach including guiding principles and philosophies-I’m excited! Checkout the recording here: https://www.
Security Hub is a great tool to monitor the security posture of your AWS accounts. It generates findings for misconfigurations, questionable configurations on AWS resources. Customers told us it was difficult to improve the account posture at scale so Priyank Ghedia and I took it upon ourselves to provide guidance
In this chat with AWS enterprise strategist, Clarke Rodgers, Megan discusses the benefits of extending security ownership beyond the security department. Here at AWS, identifying vulnerabilities isn’t just the responsibility of the security team — every employee is empowered and expected to report potential security issues. In Megan’s own
In June 2021, I had the opportunity to co-present at the AWS re:Inforce conference in Boston. My first session is with Kyle Dickinson and Karthik Ramanujam, Our Chalk Talk covered the anatomy of a ransomware event targeting data residing in Amazon S3. Check out the event pattern:
In May 2023, I had the opportunity to be a panelist for a session at the Institute for Security and Technology (IST) Ransomware Task Force event- "Gaining Ground." The IST RTF is doing great work developing global strategies to disrupt ransomware activity. Really enjoyed the discussion on Domestic
In June 2023, I had the opportunity to co-host an interactive Chalk talk session! In which we guided customers through the anatomy of a ransomware event targeting data residing in Amazon RDS. We discussed detailed best practices for detection, response, recovery, and protection. re:Inforce 2023, session TDR431.
In June 2023, I co-hosted a Chalk Talk on Operationalizing Security Findings at Scale. We guided folks through a framework for vulnerability management which will empower you and help you with the skills to navigate vulnerability management challenges successfully.
In June 2023, I had the opportunity to co-author the Announcing the AWS Blueprint for Ransomware Defense. The AWS Blueprint for Ransomware Defense provides a mapping of AWS services and features as they align to aspects of the Center for Internet Security (CIS) Critical Security Controls (CIS Controls). This
In September of 2023, I had the opportunity to chat with Matt Gravlin. Matt is a Principal Software Engineer at Intuit. I really enjoyed this discussion on Intuits security and governance approach which helps them scale their security and compliance program - so many great benefits! Check out the recording of
In October 2023, I co-authored a guide for Building a scalable vulnerability management program on AWS. This guide includes how you can build a structured vulnerability management program, operationalize tooling, and scale your processes to handle a large number of findings from diverse sources. This guide can help you
In June 2024, I had the please of chatting with a couple folks from the Starbucks Platform Engineering! We discussed what the team has built and the different security, devops, and engineering aspects of the solution. We also discuss fav coffee drinks from SBUX! This team shared great insights to
In Sept 2023, I co-authored a blog post on the AWS Security blog, Top 10 security best practices for securing data in Amazon S3. Amazon S3 is one of the first and most common service in use, besides the IAM service-of course. While there are several security features