The DocuSign Developer: Deep Dive Discussions video series covers ground from basic to complex DocuSign API use, as well as insights from our experts on best practices to take your organization from code to commerce.

In our latest series installment, DocuSign Developer – Keeping security top of mind, Aaron Liao talks with Tom Thokey – DocuSign’s Senior Director of Security Consulting. Tom holds security expertise in every stage of the end-to-end DocuSign software delivery lifecycle with an approach that, “You don’t bolt security on, you build it in.”

Different types of assessments fit best in various stages of the end-to-end software delivery lifecycle.  Some are more proactive, some more reactive; some involve specific and discrete findings, while others influence the intended functionality of a feature – but all have the same goal of ensuring security is part of the implementation, and not as an afterthought.

Watch DocuSign Developer – Keeping security top of mind and learn about assessments and best practices for shipping secure code.

For the latest in this series, sign up for our developer newsletter and follow us on Twitter.

Aaron Liao is Director of Developer Evangelism and a lifelong tinkerer. His current projects outside of DocuSign include various cryptocurrencies, his open-hardware Novena laptop, software-defined radio and various reverse engineering pursuits. He can be found on a soapbox talking about the eSignature API at a variety of developer conferences and hackathons.