Davy Hua | Security & Cloud Infrastructure Operations

I’ve been quiet online.

I build and lead security and cloud infrastructure organizations.

Security isn’t a later problem.

DevOps is getting commoditized (and it’s our fault) DevOps didn’t become hard to hire.

DevSecOps isn’t a slogan.

Security doesn’t fail because your scanner missed something.

DevOps is overwhelming because the internet won’t shut up.

DevOps has an identity problem.

Enough with the highlight reels.

Cloud-native security: where things actually go wrong Cloud-native didnt make security harder.

Cloud compliance: stop treating audits like a seasonal panic Most compliance pain isn’t caused by auditors.

Shift Left Isn’t a Slogan—It’s a Cost Reduction Strategy Security at the end of your pipeline is security theater.

Data Protection: The Five Controls That Actually Work Encryption isn’t a feature.

Cloud Security Isn’t Optional Infrastructure You moved to the cloud for speed and cost.

Job descriptions are written by people who’ve never done the job.

The Phantom Obstacles Everyone wants to talk about the tools.

Media Mentions Issues Around Scaling DevOps: “Some of the most common scaling issues related to personnel and culture.

Last Updated: February 2026 — Nine years later, the core thesis holds: DevOps isn’t a title, it’s a convergence of skills.

Last Updated: February 2026 - The Bruce Lee principles still apply, but the context has shifted.