Despite its many benefits, DevOps presents new risks and demands cultural changes that create security challenges not typically addressed by conventional security management and practices. In DevOps we (the market) again presumed technology solely would secure DevOps and CI/CD pipelines. While technology is important, DevOps security must be fortified by training teams on security principles and by building security awareness.