--- title: "Making Security Second Nature: Maryam Shoraka’s Vision for Developers" description: Maryam Shoraka from NSW DCJ discusses how we can align strategic secure coding with the realities of developers and leadership. image: https://www.coriniumintelligence.com/hubfs/Maryam%20Shoraka_AppSec%20%26%20DevSecOps%20Sydney.jpg --- [Skip to content](https://www.coriniumintelligence.com/content/making-security-second-nature-maryam-shoraka#main-content) [![Corinium](https://www.coriniumintelligence.com/hs-fs/hubfs/Corinium%20logo%20+%20branding/Corinium-logo_horizontal_reversed.png?width=646&height=196&name=Corinium-logo_horizontal_reversed.png "Corinium")](https://www.coriniumintelligence.com/) - [Home](https://www.coriniumintelligence.com/content) - [About](https://www.coriniumintelligence.com/aboutus) Show submenu for About - [Services](https://www.coriniumintelligence.com/content/services) - [Events](https://www.coriniumintelligence.com/events-calendar) - [Data Insights](https://www.coriniumintelligence.com/content/tag/data) - [InfoSec Insights](https://www.coriniumintelligence.com/content/tag/infosec) - [AssetOps](https://www.coriniumintelligence.com/assetops) - [Subscribe](https://www.coriniumintelligence.com/content/subscribe) - [More](https://www.coriniumintelligence.com/content/making-security-second-nature-maryam-shoraka#) Show submenu for More - [Articles](https://www.coriniumintelligence.com/content/tag/articles) - [Videos](https://www.coriniumintelligence.com/content/tag/videos) - [Podcast](https://www.coriniumintelligence.com/content/tag/podcast) - [Reports](https://www.coriniumintelligence.com/content/tag/reports) - [Home](https://www.coriniumintelligence.com/content) - [About](https://www.coriniumintelligence.com/aboutus) Show submenu for About - [Services](https://www.coriniumintelligence.com/content/services) - [Events](https://www.coriniumintelligence.com/events-calendar) - [Data Insights](https://www.coriniumintelligence.com/content/tag/data) - [InfoSec Insights](https://www.coriniumintelligence.com/content/tag/infosec) - [AssetOps](https://www.coriniumintelligence.com/assetops) - [Subscribe](https://www.coriniumintelligence.com/content/subscribe) - [More](https://www.coriniumintelligence.com/content/making-security-second-nature-maryam-shoraka#) Show submenu for More - [Articles](https://www.coriniumintelligence.com/content/tag/articles) - [Videos](https://www.coriniumintelligence.com/content/tag/videos) - [Podcast](https://www.coriniumintelligence.com/content/tag/podcast) - [Reports](https://www.coriniumintelligence.com/content/tag/reports) #### Search: 26 Nov, 2024 [Articles](https://www.coriniumintelligence.com/content/tag/articles) # Making Security Second Nature: Maryam Shoraka’s Vision for Developers ![Interview with Maryam Shoraka](https://www.coriniumintelligence.com/hubfs/Maryam%20Shoraka_AppSec%20%26%20DevSecOps%20Sydney.jpg) ### Corinium’s Maddie Abe spoke with Maryam Shoraka, Head of Cyber Security Operations at the NSW Department of Communities and Justice about the strategic secure coding.   Secure coding isn’t just a developer’s responsibility—it’s a core component of a robust security strategy. With constant pressure to deliver applications quickly, the challenge lies in embedding practical, actionable security practices that don’t disrupt workflows. So, how do we align strategic secure coding with the realities of developers and leadership? In this interview, we delved into approaches for integrating secure coding into fast-paced environments, addressing critical vulnerabilities, and creating a culture that values secure code as a foundation for resilient software. ### Key Points Discussed: **Security by Design** Maryam emphasised the importance of incorporating security from the earliest stages of development. She highlighted that developers should adopt a "security by design" mindset, ensuring cyber security is considered throughout the software lifecycle. This approach reduces risks often missed due to tight deadlines.   Yes, we've heard this many times, but we can't deny that the primary goal of making cyber security integral to decision-making, which sits at the heart of security-by-design, remains elusive in some organisations.   **Balancing Security and Speed** Maryam compared secure coding to developing habits while driving—regular training and education can make secure coding second nature for developers. She advocated for integrating secure practices into routine workflows to maintain development speed without compromising security.  This would be the ideal level of cyber security maturity. Security-conscious developers are invaluable, and assistance in the form of training, the provision of appropriate tools, and the opportunity to be mentored by more experienced developers will foster an environment in which code is crafted with a security-first mindset, with the precision and attention to detail required to take software to the next level.    **Role of Automation** Automation tools, such as static and dynamic application security testing (SAST and DAST), were recommended to streamline secure coding practices. Maryam noted the potential of AI to enhance these tools, particularly in CI/CD pipelines, to identify and address vulnerabilities efficiently.   **Fostering a Security-First Culture** Maryam acknowledged the challenges of instilling a security-first mindset in developers, especially when secure practices may seem slower. She stressed the importance of education, training, and fostering a culture that prioritises secure coding as a shared responsibility. This mindset shift is critical for scaling security across teams, especially in fast-paced environments. It's a balanced and strategic approach that helps build both secure code and a resilient culture.   Ultimately, building a security-first culture comes down to human factors—education, training, and shared responsibility are key to driving secure coding habits.   --- Don’t miss the opportunity to hear more from Maryam Shoraka at [AppSec & DevSecOps Sydney 2025](https://appsec-devsecops-syd.coriniumintelligence.com/) and [Cloud Security Sydney 2025](https://cloud-sec-syd.coriniumintelligence.com/) on 12 February, Royal Randwick Racecourse.  If you would like to share your experience and insights at the event, feel free to reach out to [Maddie Abe (Content Director).](mailto:maddie.abe@coriniumgroup.com) ## Related Posts [![](https://www.coriniumintelligence.com/hs-fs/hubfs/Imported_Blog_Media/BoIS-website-graphics-3-Nov-24-2022-03-48-40-3390-PM.png?width=352&name=BoIS-website-graphics-3-Nov-24-2022-03-48-40-3390-PM.png) ](https://www.coriniumintelligence.com/content/articles/the-reinvention-of-the-managed-security-service-provider) ### [The Reinvention of the Managed Security Service Provider](https://www.coriniumintelligence.com/content/articles/the-reinvention-of-the-managed-security-service-provider) Paul Grapendaal, Head of Managed Services at South African computer security specialist Nclose,... [![](https://www.coriniumintelligence.com/hs-fs/hubfs/Cybersecurity%20in%20Malaysia%20Shifting%20from%20Reactive%20to%20Strategic%20Leadership.jpg?width=352&name=Cybersecurity%20in%20Malaysia%20Shifting%20from%20Reactive%20to%20Strategic%20Leadership.jpg) ](https://www.coriniumintelligence.com/content/cybersecurity-in-malaysia-shifting-from-reactive-to-strategic-leadership) ### [Cyber Security in Malaysia: Shifting from Reactive to Strategic Leadership](https://www.coriniumintelligence.com/content/cybersecurity-in-malaysia-shifting-from-reactive-to-strategic-leadership) Malaysian organisations are facing a crossroads in how they approach cybersecurity, especially in... [![](https://www.coriniumintelligence.com/hs-fs/hubfs/Imported_Blog_Media/Featured-Images-7-Nov-24-2022-04-28-13-6846-PM.jpg?width=352&name=Featured-Images-7-Nov-24-2022-04-28-13-6846-PM.jpg) ](https://www.coriniumintelligence.com/content/articles/cdao-fall-2021-retail-data-strategy-maturity) ### [Retail Sector Data Strategy Maturity on Display at CDAO Fall Virtual](https://www.coriniumintelligence.com/content/articles/cdao-fall-2021-retail-data-strategy-maturity) The retail executives who spoke at CDAO Fall Virtual say demand for data-driven capabilities soared... [![Corinium-logo_horizontal_reversed](https://www.coriniumintelligence.com/hs-fs/hubfs/Corinium%20logo%20+%20branding/Corinium-logo_horizontal_reversed.png?width=646&height=196&name=Corinium-logo_horizontal_reversed.png "Corinium-logo_horizontal_reversed")](https://www.coriniumintelligence.com) Corinium Global Intelligence 20-22 Wenlock Road, London, N1 7GU 0203 432 2335 #### Our Recent Posts - [About Us](https://www.coriniumintelligence.com/aboutus) - [Subscribe](https://www.coriniumintelligence.com/content/subscribe) - [Privacy Policy](https://www.coriniumintelligence.com/privacy-policy) #### Follow Us [Follow us on LinkedIn ](https://www.linkedin.com/showcase/corinium-data-%26-analytics/?isFollowingPage=true) [Follow us on Facebook ](https://www.facebook.com/coriniumglobal/) [Follow us on Twitter ](https://twitter.com/coriniumglobal) [Follow us on YouTube ](https://www.youtube.com/channel/UCnuGiXMWAH5bhfXOfWkPIuw) [Follow us on Facebook ](https://open.spotify.com/show/4op8cNfQRNrZMP5i79Aze9) [Follow us on Facebook ](https://podcasts.apple.com/gb/podcast/the-business-of-data-podcast/id1528796448) ![](https://px.ads.linkedin.com/collect/?pid=182706&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=306561&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=60306&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=1749329&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=5553244&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=5583316&fmt=gif) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Maddie Abe", "url" : "https://www.coriniumintelligence.com/content/author/maddie-abe" }, "dateModified" : "2025-04-08T00:54:06.295Z", "datePublished" : "2024-11-26T04:08:56.000Z", "headline" : "Making Security Second Nature: Maryam Shoraka’s Vision for Developers", "image" : [ "https://www.coriniumintelligence.com/hubfs/Maryam%20Shoraka_AppSec%20&%20DevSecOps%20Sydney.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.coriniumintelligence.com/content/making-security-second-nature-maryam-shoraka", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.coriniumintelligence.com/hubfs/Corinium-logo_+tagline_horizontal_web-header.png" }, "name" : "Corinium Global Intelligence Limited" } } ```