devcon8 / the last security hire
- YouTube
- Details
The Last Security Hire
Duration: NaN:NaN:NaN
Speaker: cvh
Type: Lightning Talk
Expertise: No prior knowledge
Event: Devcon
Date: Nov 2026
Security teams are quietly becoming fleets of agents with one human attached. This talk maps the security function area by area against a simple criterion: automate the work, never the accountability. Triage, vulnerability find-validate-fix, dependency review, and compliance evidence go fully agentic. Incident command, risk acceptance, and regulatory accountability do not: DORA and NIS2 pin responsibility on named humans, and no agent can carry liability. In between sits one of the most practical questions of 2026: what your ISO 27001 and SOC 2 audits look like when agents operate the controls, and why complete, reasoned agent logs are better evidence than anything your analysts produce. The result is a job spec: the last security hire is not a survivor. It is a role most organizations have not written yet.