Running a Security Program Without a Dedicated Team

Most teams know security matters. Fewer have the time, people, or patience to do it well. Developers are focused on shipping, ops teams are fighting fires, and security work often becomes a noisy, reactive backlog spread across disconnected tools. In this session, Etienne Le Blan shares how teams can build a strong security foundation and scale their security posture without a dedicated security team. You will see how focusing on context changes everything. What is actually running in production, what is truly exposed, and which risks are worth acting on now. Drawing on real customer patterns and Datadog Cloud Security and Code Security, this talk shows how to filter out noise, route issues to the right owners, and automate response where it matters. You will leave with practical guidance for prioritising the small set of risks that drive real impact, reducing manual effort, and helping security fit naturally into the workflows teams already use every day.