Snyk and Shutterstock discussed building a DevSecOps culture, which is crucial for implementing new security processes in application development. The changing application development landscape, driven by cloud native computing and microservices architectures, puts more responsibility on developers than ever before. To overcome the challenges of introducing a security program, Shutterstock created events and games to make security more fun, chose developer-friendly tooling that fits seamlessly into existing workflows, and implemented governance around security processes. The company's experience highlights the importance of shifting left in DevSecOps, testing security throughout the entire development pipeline, and providing actionable feedback to help developers with remediation.