Skip to content
Carolina Code Conference
Served by Pony (Stallion) in 19ms

2025 speaker

Larry Maccherone

Larry Maccherone

Couples Counseling between Security and Engineering

Raleigh, NC

Larry Maccherone is a DevSecOps/Shift-Left/Dev-centric Security and Development improvement pioneer.

At Comcast, Larry launched and scaled the DevSecOps Transformation program over five years by safely empowering 600 development teams to take ownership of the security of their products. Larry was a founding Director at Carnegie Mellon's CyLab, researching cybersecurity and software engineering. While there, he co-led the launch of the DHS-funded Build-Security-In initiative. Larry has also served as Principal Investigator for the NSA's Code Assessment Methodology Project, which wrote the book on evaluating application security tools and received the Department of Energy's Los Alamos National Labs Fellow award.

Larry firmly believes in learning by doing so in his spare time; he is the author of a dozen open source projects, one of which gets a million downloads per month.

Visit website

2025 · intermediate

Godfather Security: How Development Can Make an Offer that Security Can't Refuse

There is the way development really functions and there is the way security believes development functions. In most organizations, the two don’t match.

Join DevSecOps pioneer Larry Maccherone for an enlightening guide - tried and tested with scaling security in 600 dev teams - that engineering can use to “make a deal” with security so the two functions align more closely. You will hear thoughts on what true Developer-First Security could look like; what practices and tools provide better risk reductions; how productivity doesn’t need to be hampered by security; and, how security can be scaled in engineering terms.

From the talk