Securing Cloud Native Apps

by Michael Anderson, Nick Reva, Shrikant Pandhare

Overview

A no-fluff guide to implementing best security practices for microservices in the cloud written by a team of experienced security engineers at Snapchat.

This book takes you through every step of secure software development and deployment for microservices – the discrete functions within a larger application.

Readers begin by exploring core security tenets, then dive into developing microservices and securing infrastructure. Along the way, they’ll gain the skills to think like a security engineer at scale and effectively plan secure designs.

Each chapter provides step-by-step explanations of vital concepts, practical examples, mistakes to look out for, and quizzes to test the reader’s knowledge. Whether you’re a one-person security team or a larger group, this book equips you with the skills to build a full-fledged microservices security discipline.

Product Details

ISBN-13:	9781718503625
Publisher:	No Starch Press
Publication date:	02/17/2026
Pages:	304
Product dimensions:	7.00(w) x 9.25(h) x (d)

About the Author

Nick Reva is a security engineer, author, teacher and builder that loves growing and leading security engineering teams for the world's most ambitious engineering organizations. Over the last 10 years, Nick has led security engineering teams in building scalable security services in cloud-native environments at Snapchat and SpaceX.

Shrikant Pandhare is an engineering manager who leads infrastructure security at Snap Inc. He is passionate about cloud security monitoring, cross-cloud access patterns, Kubernetes security, and securing cloud fleet at scale. Previously, Shrikant led security initiatives at Splunk and helped build the cloud identity service at Oracle.

Michael Anderson is a security engineer and one of the founding members of the production security team at Snapchat. He has presented at several national conferences, including DEF CON. He also started the Kubernetes Security team at Snapchat, leading the security effort on new infrastructure models.