Will Cloud Security absorb GRC? | Guest: Damien Burks
Source: YouTube · GRC Engineering Club · published Sep 6, 2026 · 49:54
BLUF: Damian Burks discusses the evolution of GRC engineering into a specialized subset of cloud security, advocating for a strategic career path that combines technical certification with soft skills and portfolio building to demystify the industry 4:00.
Key Takeaways:
• GRC is shifting from manual policy enforcement to "shifting left," where cloud security engineers codify controls directly into infrastructure using tools like Terraform 3:00.
• Burks advises career switchers to start in cloud support or engineering roles to gain foundational knowledge before pursuing security certifications, rather than aiming for security as an entry-level role 15:30.
• His open-source project, DevSec Blueprint, addresses the gap in market education by providing structured learning paths that include soft skills, technical capstones, and career strategy 26:30.
• True job security in tech comes from the ability to continuously learn new technologies and unlearn obsolete habits, rather than relying on static knowledge 45:30.
• The industry suffers from gatekeeping and unrealistic promises from boot camps; Burks emphasizes transparency and the importance of building a public portfolio to demonstrate competence 33:00.
Closing Statement:
By bridging the gap between technical execution and policy compliance, professionals can navigate the complex landscape of cloud security more effectively. Burks' holistic approach offers a realistic roadmap for aspiring engineers to build sustainable careers in a rapidly evolving field.
Sources:
- 4:00 Discussion on GRC becoming a subset of cloud security engineering.
- 3:00 Explanation of shifting GRC left and codifying policies.
- 15:30 Advice on career progression from cloud support to security.
- 26:30 Introduction to the DevSec Blueprint project and its goals.
- 45:30 Definition of job security as continuous learning.
- 33:00 Critique of industry gatekeeping and boot camp marketing.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Welcome friends to another edition of the Anti Checkbox podcast. I am joined today. I'm excited. We're going to be getting into some nitty-gritty and I'm going to need I'm going to pick his brain on some of it because I'm currently trying to muddle my way through getting more technical. So, without further ado, the great Damen Burks. Damian, welcome. >> Hey, excited to be here. Thank you so much for having me. >> Awesome. give the folks if uh if they've been living under a rock, let them know kind of who you are, what you're about, what you've been up to lately. >> Yeah, absolutely. So, hello everybody. I have been in tech for the past, I would say, 19 years now. Holistically, I started my journey at 16 years old. So, I've been a programmer since then. And right now, I was just kind of ski…