Behind the Scenes with Ammar Alim, DevSecOps Leader | by Renae Kang

Adobe’s DevSecOps team creates innovative solutions that seamlessly integrates application and infrastructure security into Agile and DevOps workflows. By embedding security into these solutions from the earliest stages of development, Adobe’s engineering teams can address security issues easier, faster, and at less expense before they reach production. Ensuring that Adobe bakes security into the DNA of its products at conception takes someone with a special interest in technology. It takes someone like Ammar Alim, senior manager of Adobe Security’s DevSecOps team whose passion for technology is rooted in a deep family history that has shaped his journey.

Join us as we take you Behind the Scenes (BTS) and introduce you to Ammar and how he puts his technology upbringing to work at Adobe.

My connection to technology wasn’t born from video games or childhood programming; To me, computers and technology have always been powerful tools for changing and improving lives. This understanding, passed down from my family experiences, has profoundly shaped my view of technology and has been a driving force in my career path.

My parents were born in villages along the Nile Valley, just south of the Great Pyramid of Giza. They were the first in their families to attend college where they met, breaking away from a long farming tradition that began in 3000 BC, according to historians. Most of my relatives still operate farms, but my parents took a different route, influenced by the opportunities that education and technology could provide.

My father moved to Saudi Arabia after college where he took a job with a foreign company that introduced him to computers. Eager to learn, he immersed himself in absorb everything he could, eventually buying a Commodore 64 — one of the first home computers available — and taught himself how to program in the C language. He soon began to believe in the importance of computer literacy skills for everyone, so he inspired my mother to learn about computers after she lost out on a job due to her lack of computer skills.

When my father passed away while I was still young, my mother needed to find work to support our family. At the time, women weren’t allowed to work in Saudi Arabia, and opportunities were limited for educated women in Egypt. However, my mother used her technology skills to communicate with international organizations and eventually secured a job with the United Nations.

Building upon my parents’ own experiences, I took a part-time tech job in my second year of college, which eventually turned into a full-time role after graduation. This job introduced me to a manager who played a pivotal role in shaping my career. He led the application security team, overseeing vulnerability management, penetration testing, and other key functions. As I attended staff meetings, I became increasingly fascinated by security as engineers shared updates on their security projects.

I became particularly interested in cloud security as our company was migrating to the cloud. It quickly became clear that securing cloud environments posed a significant challenge due to a shortage of expertise in the field. With the public cloud on the horizon, I saw an opportunity to enter an emerging field, contribute to the team, and advance my career.

At the time, I had no prior cloud experience, so I committed several months of studying to achieve AWS certifications and attended an AWS conference in Chicago to learn more. Shortly after, I officially joined the Cloud team and transitioned to working full-time on cloud security automation.

A year later, I had established myself as a cloud security engineer, and as demand for cloud security professionals surged in this rapidly growing field, I began receiving job offers. One offer stood out — a chance to move to Seattle and join a dedicated cloud security team, which I couldn’t pass up. It wasn’t just a dream job; it was the realization of a personal goal to live in Seattle, a city I had always been drawn to, both for its tech scene and its mountain climbing scene.

I later had the opportunity to lead Cloud & Infrastructure Security at Frame.io, a fast-growing post-production startup that offered immense growth and learning opportunities. After Adobe’s acquisition of Frame.io in 2021, my team eventually transitioned to leading DevSecOps at Adobe.

As the leader of Adobe’s DevSecOps team, I oversee a talented group of engineers focused on empowering product teams to ship “software, safer, sooner” — our DevSecOps motto — by creating seamless integrations that boost developer productivity.

Our team drives two key security initiatives. First, we leverage fuzz testing, a powerful security testing technique, to ensure Adobe applications, including flagship products like Photoshop, meet the highest security standards. Second, we provide Web Application Protection, using advanced tools such as cloud-native and next-gen web application firewalls to defend against emerging threats, including zero-day vulnerabilities. We also focus on enabling fast response to attacks like DDoS, making sure our products remain secure and reliable under attacks.

What I enjoy most about working with my team is tackling complex security challenges. I love seeing how the team grows with each project. There’s often a sense of confusion and anxiety at the start of a big project, but I’ve come to see it as a positive sign; it means we’re working on something important and challenging. Over time, I’ve watched the team transform rough ideas into well-developed solutions, experimenting, refining, and improving with each step.

As a manager, there’s nothing more satisfying than seeing my team overcome tough challenges, take risks, and push through difficult moments to complete a project. These experiences create strong bonds and a sense of unity, which makes the work even more fulfilling.

What I appreciate most about Adobe is the abundance of opportunities given to contribute to something greater and make a real difference in people’s lives through technology. As tech workers, we sometimes forget how much our work can impact real people’s lives, but then I think of someone like my neighbor– a photographer and a single mother of two. For her, Photoshop isn’t just a tool; it’s her livelihood. Working at Adobe, I support the technology that enables her and countless others to pursue their passions and provide for their families. Knowing that what we do directly helps people like her is what makes my work truly meaningful.

Adobe also prioritizes the well-being of its employees, consistently demonstrating care whether through crisis support, mental health resources, or flexible work options. This commitment fosters a culture where people feel valued, which is why I’m proud to work here.

I advise anyone getting into cloud security to build a solid foundation in IT basics like networking, infrastructure, and programming. You don’t need to be an expert in everything, but having a well-rounded understanding will help you adapt to new challenges. Versatility is critical in security because it lets you see the bigger picture and contribute more effectively.

Another piece of advice is to stay mindful of how your role fits into the broader context of business and society. It’s easy to get lost in the technical details, but stepping back to understand how your work impacts the company, the industry, and even society as whole will give you a valuable perspective. It helps you improve your work, connect to a larger purpose, and make a more meaningful impact.

Growing up across three continents and speaking four languages, I’ve always been fascinated by different cultures. As a child, living in foreign countries often made me feel like I didn’t quite belong. To fit in, I often embraced local customs, including wearing traditional clothing. This began when I was three years old and living in Saudi Arabia. I didn’t fully understand the significance at that age, but I begged my parents to buy me a Ghutra (traditional white headscarf) and an agal (the black cord worn over it), wanting to wear what I saw around me.

What started as a way to fit in gradually evolved into something more meaningful. As I moved to different countries, my interest in traditional clothing grew into a deeper appreciation for the diverse cultures I experienced. Today, I have a collection of traditional garments from the places I’ve lived or visited, each one a reminder of those unique experiences and memories. Over time, this collection has come to symbolize my respect for the diversity of cultures that have shaped who I am.

This global perspective has also influenced how I work. Whether learning new technologies or navigating diverse team dynamics, adaptability and understanding different perspectives have become invaluable assets to me. With Adobe planning to open a new regional headquarters in Riyadh, Saudi Arabia in the next year, I’m thinking it may be time to pay a visit in the new office, proudly wearing a traditional Thobe…