AI Security Engineer Foundations + Certificate — Javier Garza, Snyk
Source: YouTube · AI Engineer · published Oct 11, 2026 · 1:57:18
This AI security workshop covers the OWASP Top 10 for LLMs, shadow AI, threat modeling, MCP security, and vibe coding risks—stressing that AI-generated code is fast but not secure by default 1:39-2:12.
Key Takeaways:
• Prompt injection (OWASP #1): defend via input sanitization, strong system prompts, and human approval for high-risk actions 6:05-10:50
• Sensitive data: uploads may train models and prompts can be retained ~30 days; restrict agent database access 13:20-16:43
• Supply chain: 367 of ~10,000 agent skills scanned contained malware; use AI BOMs and scan MCP servers 20:48-24:10
• Excessive agency: avoid "always allow," apply least privilege, keep humans in the loop 25:02-27:14
• Shadow AI: ~60-80% of employees use unapproved tools; bans fail—use scanning and education 31:11-38:20
• Vibe coding: simple login prompts produced vulnerabilities 50%+ of the time; use security-focused prompts and CI/CD guardrails 48:23-1:33:28
Education and culture matter more than policies—free tools exist for AI BOMs, MCP scanning, and red teaming 1:51:15-1:52:53.
Sources:
- 1:39-2:12 Overview
- 6:05-10:50 Prompt injection
- 13:20-16:43 Data disclosure
- 20:48-24:10 Supply chain
- 25:02-27:14 Excessive agency
- 31:11-38:20 Shadow AI
- 48:23-1:33:28 Vibe coding
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 2 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hey, welcome everyone. How are you guys doing today? >> Yeah, I know the sessions after lunch are really tough. Usually what I do is I make everybody do 10 uh uh situps, you know, after lunch just to warm up. If you guys there um you know we can do it. Anybody doesn't has any physical limitation here. You want you guys want to try? It's very simple. You have to stand up. Can you stand up for a second? We'll do three only. Okay. Just in case so I don't get sued. You guys know um how to do a squat. Very simple. You know I'm a fitness instructor too. So just try imagine that you are sitting in a chair. Okay. And then stand up. Super easy. Do three. Okay. Three, two, one. Awesome. Good job. All right. So this was the um today we have a big challenge. You know we do usually this uh workshop in …