SREチームをどう作り、どう育てるか ― Findy横断SREのマネジメント

Slide 1

Slide 1 text

43&νʔϜΛͲ͏࡞ΓɺͲ͏ҭͯΔ͔ 'JOEZԣஅ43&ͷϚωδϝϯτ 'JOEZͷαʔϏεΛࢧ͑Δɺԣஅ43&νʔϜͷϚωδϝϯτͱٕज़ͷ௅ઓ ϑΝΠϯσΟ ג $50ࣨϓϥοτϑΥʔϜ։ൃνʔϜαϒϚωʔδϟʔ43& ҆ୡྋ !BEBDIJO

Slide 2

Slide 2 text

͋͐͡Μͩ ● ࣗݾ঺հ ● 'JOEZʹ͓͚Δԣஅ43&ͷ্ཱͪ͛ ● ͜ͷ೥ؒͰ΍͖ͬͯͨ͜ͱ ● αϒϚωʔδϟʔͷཱͪҐஔͱ͸ ● ԣஅϚωδϝϯτͷϦΞϧͳۤ࿑ͱ޻෉ ● 43&ࣾ಺ཹ੍ֶ౓ʹ͍ͭͯ ● ·ͱΊ

Slide 3

Slide 3 text

Slide 4

Slide 4 text

4 ࣗݾ঺հ ҆ୡྋ !BEBDIJO ܳྺ೥໨ ɾϑΝΠϯσΟ ג $50ࣨϓϥοτϑΥʔϜ։ൃνʔϜαϒϚω43& ɾ1PSUGPMJPBEBDIJONF#MPHCMPHBEBDIJONFXJLJBEBDIJONF ɾ5FDI#VMM δϡχΞΤϯδχΞίϛϡχςΟ 'PVOEFS ɹɾ43&ΤϯδχΞͷϝϯλϦϯάྦྷܭ໊ˢ ɹɾ4MBDLࢀՃऀ਺͸໿໊ˢ ɹɾίϛϡχςΟϚωʔδϟʔ-5ΠϕϯτӡӦͦͷଞ։ൃ ɾݸਓ5&$)803-%ͰΤϯδχΞΨδΣοτؔ࿈ͷ:PV5VCFΛൃ৴த

Slide 5

Slide 5 text

ձࣾ֓ཁ 5

Slide 6

Slide 6 text

ϑΝΠϯσΟ͕ఏڙ͍ͯ͠ΔαʔϏε 6

Slide 7

Slide 7 text

Slide 8

Slide 8 text

'JOEZ1MBUGPSN43&νʔϜͱ͸ʁ 8 'JOEZ͸ෳ਺ͷϓϩμΫτΛల։͍ͯ͠Δɻಛఆ ͷϓϩμΫτʹดͣ͡ɺશࣾతͳٕज़ج൫ͷ੔උ ͱඪ४ԽΛ୲͓ͬͯΓɺݱࡏ͸໊Ͱ׆ಈ͍ͯ͠ Δɻ ࠶ఆٛͷ͓࿩͸͜ͷޙৄ͘͠ൃද͠·͢👀 ԣஅతͳٕज़ࢧԉ ೥݄ൃ଍ ೥ʹϏδϣϯΛ࠶ఆٛ

Slide 9

Slide 9 text

ݱࡏͷ43&૊৫ 9

Slide 10

Slide 10 text

43&νʔϜͷྺ࢙ 10

Slide 11

Slide 11 text

೥൒͔͚ͯ࡞͖ͬͯͨελʔτΞοϓͷ43&dମ੍ฤd 11

Slide 12

Slide 12 text

Slide 13

Slide 13 text

͜ͷ೥ؒͰ΍͖ͬͯͨ͜ͱ d 13 ɾ ج൫ͷίʔυԽɾඪ४Խ  ɹɾશ؀ڥͷTerraform importԽ  ɹɾTerraform൚༻Ϟδϡʔϧͷ֦ॆ  ɹɾGitHub ActionsͷςϯϓϨʔτԽ  ɹɹɾecspressoͷಋೖ  ɹɾSandBox  ɹɹɾaws-nukeʹΑΔෆཁϦιʔεͷࣗಈ࡟আ

Slide 14

Slide 14 text

͜ͷ೥ؒͰ΍͖ͬͯͨ͜ͱ d 14 ɾΦϒβʔόϏϦςΟɾ৴པੑ޲্ ɹɾ'JOEZ ɹɾ'JOEZ'SFFMBODF ɹɾ'JOEZ5PPMT ɹɾ'JOEZ5FBN ɹɾશαʔϏεͰͷ4-*4-0ͷܭଌ ɹɹɾఆ఺؍ଌձ ɹɾෛՙࢼݧ؀ڥͷݕূ

Slide 15

Slide 15 text

͜ͷ೥ؒͰ΍͖ͬͯͨ͜ͱ d 15 ɾηΩϡϦςΟج൫ͷߏஙɾڧԽ  ɹɾShisho Cloud(CSPM)ͷಋೖ ɹɾTakumi(SAST/DAST)ͷಋೖ  ɹɾAmazon Security Lakeͷಋೖ  ɹɾSOC2 Type2 ରԠ

Slide 16

Slide 16 text

͜ͷ೥ؒͰ΍͖ͬͯͨ͜ͱ d 16 ɾσʔλɾ%#ӡ༻ͷߴ౓Խ ɹɾ5FBN ɹɹɾຊ൪%#ΫϩʔϯϫʔΫϑϩʔ ɹɾ5PPMT$POGFSFODF ɹɹɾຊ൪%#޲͚4UHϚεΩϯάϫʔΫϑϩʔ ɹɾϩάج൫ͷઃܭ

Slide 17

Slide 17 text

͜ͷ೥ؒͰ΍͖ͬͯͨ͜ͱ d 17 ɾ։ൃମݧɾӡ༻ޮ཰ͷվળ  ɹɾ։ൃ؀ڥͷJust fi leԽ  ɹɹɾFindy Tools  ɹɹɾFindy Team+ ɹɾWordPressͷShifterҠߦ ɹɾΦϯϘʔσΟϯά੔උ ɹɾ৽نδϡχΞϝϯόʔڭҭ  ɾAI׆༻  ɹɾDevin΍AI ิॿʹΑΔӡ༻ɾߏஙͷࣗಈԽ

Slide 18

Slide 18 text

͜ͷ೥ؒͰ΍͖ͬͯͨ͜ͱ d 18 ɾίετ࠷దԽ ɹɾ3*ߪೖ ɹɾ&$4"SNԽ ɹɾ"84,OPXMFEHF.$1ʹΑΔίετ ࠷దԽ ɾϓϩμΫτɾࣄۀࢧԉ ɹɾ'JOEZ5FBNϚʔέοτϓϨΠεରԠ

Slide 19

Slide 19 text

͜ͷ೥ؒͰ΍͖ͬͯͨ͜ͱ d 19 ɾ৽αʔϏε͸͜ͷೋ೥ؒͰαʔϏε΋ߏஙΛߦͬͨ

Slide 20

Slide 20 text

εϥΠυͰ·ͱ·͍ͬͯ·͢ 20

Slide 21

Slide 21 text

"844VNNJU+BQBOͰ΋ηΩϡϦςΟϩάج൫ʹ͍ͭͯొஃ 21

Slide 22

Slide 22 text

43&,BJHJͰ΋5BLVNJͷ͓࿩Λ͠·ͨ͠ 22

Slide 23

Slide 23 text

'*OEZ5FDI#MPHͰ΋ৼΓฦΓ͍ͯ͠·͢ 23

Slide 24

Slide 24 text

Slide 25

Slide 25 text

αϒϚωʔδϟʔͷཱͪҐஔͱ͸ʁ 25 ● Ϛωʔδϟʔͷӈ࿹ͱͳΔ ● ϝϯόʔ΁ͷٕज़ࢦಋ ● ϦʔμʔγοϓͳͲͷ੒௕ࢧԉ ● λεΫϚωδϝϯτ ○ τΠϧ࡟ݮͱϓϩδΣΫτͷόϥϯεΛ ௐ੔͠ɺΦʔόʔϫʔΫΛ๷͙ ● ϩʔυϚοϓͷࡦఆ ○ ϚωʔδϟʔͱڞʹνʔϜͷ΍Γ͍ͨ͜ ͱΛݴޠԽͯ͠༏ઌ෇͍ͯ͘͠ ● 43&εΩϧͷఆྔԽ

Slide 26

Slide 26 text

ΤϯδχΞϦϯάϚωʔδϟʔೖ໳ 26 ● 4BSBI%SBTOFS ● (PPHMF ● ΤϯδχΞϦϯάσΟϨΫλʔ ● ݩ"[VSFϓϦϯγύϧϦʔυ ● $PODBUFOBUF$POGͷڞಉओ࠵ऀ ● ಈͨ͘Ίͷى఺ͱͯ͠ར༻͍ͯ͘͠ ● શͯ͜ͷຊΛࢀߟʹ͢Δ͜ͱ͸೉͍͠ ● ༏ઌॱҐΛ͚ͭΔࢦ਑ͱͯ͠׆༻͢Δ ● ΍Βͳ͍͜ͱΛܾΊΔ ࢀߟ: https://sarah.dev/

Slide 27

Slide 27 text

Slide 28

Slide 28 text

ग़དྷཱͯϗϠϗϠνʔϜͱͯ͠ͷ՝୊ 28 ● Ϗδϣϯϛογϣϯ͕ந৅తͩͬͨ ● ԿΛୡ੒͢ΔνʔϜͳͷ͔͕ᐆດ ● ୭͕ͲͷαʔϏεΛ੹೚࣋ͭͷ͔ෆಁ໌Ͱɺ ࡞ۀ͕ଐਓԽɾൈ͚࿙Ε͠΍͔ͬͨ͢ ● ٞ࿦͕Ͱ͖ͳ͘ͳΔ ● ৽αʔϏεͷ֦େԽʹ൐͍ɺ༨༟͕ͳ͘ͳΔ ● ேձͷ͕࣌ؒ෼ͱ୹͘ͳΓɺձ࿩ϩε͕ൃੜ ● ൃݴͷػձ͕ݶΒΕɺ՝୊΍ΞΠσΞ͕ ຒ΋Ε͕ͪʹͳͬͨ ● ந৅Խ͔Β۩ମԽ΁ ● 43&Α΋΍·ձΛ࣮ࢪ ● νʔϜͷํ޲ੑʹ͍ͭͯٞ࿦ ● ϚωʔδϟʔͷϑΥϩʔΛ͢Δ͜ͱ ● ୹ظϛογϣϯ ● ʮϑΝΠϯσΟͷࣄۀ੒௕Λࢧ͑ΔͨΊʹɺ43&૊৫ͷ͋Γํͷཱ֬ʯ ● தظϛογϣϯ ● ʮࣾһશһ͕ࣄۀ੒௕ʹूதͰ͖ΔΑ͏ͳ࢓૊ΈΛߏங͠ɺ҆શʹఏڙʯ طʹ୹ظɺதظϛογϣϯ͸ڞʹ ΫϦΞ͍ͯ͠ΔΜͩΘ…དྷظͲ͏͢ΔΜ΍ʂʁ ๩ͯٞ͘͠࿦͕Ͱ͖Ͷ͐…Ϛωʔδϟʔͷ ϑΥϩʔ͢Δ͔͠ͳ͍ͳʂ

Slide 29

Slide 29 text

43&Α΋΍·ձͷ࣮ࢪ 29 ● νʔϜͷํ޲ੑͱϏδϣϯ ● ϏδϣϯΛମݱ͢ΔͨΊʹͭΛ࣠ʹߟ͑Δ ● ʮϚΠϯυηοτʯ ● ʮઓུʯ ● ʮ&OBCMJOHʯ ● ϛογϣϯͷҐஔ͚ͮ ● ࠓ·Ͱ୹ظɺதظɺ௕ظͱந৅౓͕ߴ͘ͳΓ͕ͪ ● ϫʔΫϓϥϯ͝ͱʹࠓظདྷظͷϛογϣϯΛ ݴޠԽ ● ධՁ࣌ͷλΠϛϯάͰԿΛ΍Δ͔ ෛ୲ʹͳΒͳ͍ͨΊ

Slide 30

Slide 30 text

1MBUGPSN43&νʔϜͷϏδϣϯΛ࠶ఆٛ 30 ● Ϗδϣϯ ● 43&ͷจԽΛ૊৫શମʹࠜ෇͔ͤΔ ● ։ൃνʔϜ͕ࣗ཯తʹ43&Λ࣮ફͰ͖Δ Α͏ʹࢧԉ ● αʔϏε୲౰ऀΛ໌֬Խ ● શαʔϏεͷ՝୊Λԣஅతʹ೺ѲͰ͖ͨͷ͸ Α͔͕ͬͨɺ௨ৗλεΫ͕ภΓ͕ͪʹͳͬͨ ● Ұ൪ଟ͍ͷ͸ఆ఺؍ଌձ 4-0ৼΓฦΓ ͷ .5(Ͱͷ%BUBEPHઃఆपΓ मਖ਼ґཔ ● αʔϏε͝ͱʹ୲౰ऀΛৼΓ෼͚ɺ੹೚ൣғ Λ໌֬Խͨ͠ ● Ұ෦͸&NCFEEFE43&΁

Slide 31

Slide 31 text

POͷ՝୊ͱվળ 31 ● POͷ՝୊ ● ͦͷ৔Ͱ࿩͍ͨ͜͠ͱΛϝϞ͍͕ͯͨ͠ɺ ࡶஊʹͳΓ͕ͪʹͳΓɺ5SZ͕ਐ·ͳ͍ ● վળํ๏ ● ໋୊ΛܾΊͯɺݴޠԽͨ͠ ● ࠓऔΓ૊ΜͰ͍Δ͜ͱ ● Α͔ͬͨ͜ͱɺ͏·͍ͬͨ͘͜ͱ ● ΠϚΠνͩͬͨ͜ͱɺվળ͍ͨ͜͠ͱ ● ϞϠϞϠ͍ͯ͠Δ͜ͱɺؾʹͳ͍ͬͯΔ͜ͱ

Slide 32

Slide 32 text

(JU)VCΧϯόϯͷλεΫ؅ཧվળ 32 ● *TTVF؅ཧ ● Χϯόϯ͸࡞͍͕ͬͯͨɺ*TTVF؅ཧ͕ෆे෼ ● ϲ݄Ҏ্์ஔ͞Ε͍ͯΔ*TTVF͸Ϋϩʔζ ● ேձ ● ϧʔϨοτํࣜͰ࢘ձΛܾΊ͍͕ͯͨʜ ● ࣗ෼͕࢘ձΛ୲౰͢Δ͜ͱͰɺϝϯόʔͷਐḿΛ؅ཧͰ͖ΔΑ͏ʹͳͬͨ ● ਐΊํ ● ϓϩδΣΫτ͸#PBSE5PUBMJTTVFϩʔυϚοϓͷͭΛ࣠ʹਐΊΔ ● ਌λεΫɾখλεΫʹϥϕϧ෇͚ͯ͠੔ཧ ● ఆྔతʹৼΓฦΓՄೳͳܗʹվળ

Slide 33

Slide 33 text

33 (JU)VCΧϯόϯͷλεΫ؅ཧվળ

Slide 34

Slide 34 text

34 (JU)VCϩʔυϚοϓͰͷ؅ཧ

Slide 35

Slide 35 text

໨ඪपΓͷՄࢹԽ 35 ● Ҏલ͸εϓγͰ؅ཧ͍͕ͯͨ͠ɺࢹೝੑ͕ѱ ͍ͨΊɺࠓظ͔Β$BDDPͰΧϯόϯԽͨ͠ ● ༏ઌॱҐΛܾΊΔ ○ ௿ɺதɺߴ ○ λεΫΛࡉ෼Խͯ͠ʮ͍ͭ·ͰʹɾԿ ΛɾͲ͜·Ͱ΍Δ͔ʯΛఆྔతʹఆٛ ͠΍ͨ͘͢͠ɻ ● ༏ઌ౓ʹج͍ͮͨҙࢥܾఆͷਝ଎Խ

Slide 36

Slide 36 text

Slide 37

Slide 37 text

43&ࣾ಺ཹ੍ֶ౓ʹ͍ͭͯ 37 ● ৽αʔϏε͕૿͑Δʹ͋ͬͯɺԣஅ43&νʔϜͷ޻਺΍໰͍߹Θ͕ͤݶքʹɾɾɾ ● ෦ॺ಺Ͱ43&ͷ஌ࣝ΍ӡ༻ํ๏Λల։ɾఆணͤ͞Δ͜ͱΛ໨తͱͨ͠&OBCMJOHΛਪਐ͢Δํ਑΁ ● υΩϡϝϯτಈըͰ43&ͷۀ຿ΛֶͿ ● ϖΞϓϩ4BOECPY؀ڥͰ࣮ફ΍ɺ৽αʔϏεͷߏஙΛߦͬͯ΋Β͏ ● ۩ମతͳεΩϧ ○ ߏங *BD5FSSBGPSN ○ $*$% ϦϦʔεΤϯδχΞϦϯά ○ ΦϒβʔόϏϦςΟɺϞχλϦϯά ○ 4-*4-0ɺΤϥʔόδΣοτ ○ ηΩϡϦςΟରԠ ○ ࣗಈԽͱτΠϧ࡟ݮ

Slide 38

Slide 38 text

ࠓޙͷ43&૊৫ 38

Slide 39

Slide 39 text

Slide 40

Slide 40 text

·ͱΊ 40 ✓ 'JOEZͷԣஅ43&͸೥໨Ͱ·ͩ·ͩ৳ͼ͠Ζ͔͠ͳ͍ ○ Ϛωδϝϯτʹॲํᝦ͸ͳ͍ ○ νʔϜͷํ޲ੑ͸ৗʹձ࿩͠ଓ͚ɺ߹ҙܗ੒͍ͯ͘͠ ✓ ج൫੔උɾ৴པੑ޲্ɾηΩϡϦςΟɾ։ൃࢧԉͳͲ ○ ଟذʹΘͨΔऔΓ૊ΈΛ௨ͯ͡౔୆͸ண࣮ʹ੔͖͍ͬͯͯΔ ✓ ࠓޙ ○ ԣஅ43&͕͢΂ͯΛ๊͑ࠐΉͷͰ͸ͳ͘ɺ&OBCMJOHΛ௨֤ͯ͡෦ॺͷࣗ཯ੑΛߴΊΔ ○ ૊৫શମͱͯ͠εέʔϧͰ͖Δ43&ମ੍΁ͱ੒௕͍ͯ͘͠ϑΣʔζ ○ 43&εΩϧͷఆྔԽ ○ νʔϜͷεΩϧ޲্ͷͨΊʹఆྔతʹܭଌ͢Δ࢓૊ΈΛ࡞Γ্͛Δ ○ ڵຯ͋Δํ͸ͥͻɺ࠙਌ձͰ͓࿩͠·͠ΐ͏ʂ