SHIFT LEFT THEN SHIFT UP: Strengthening Your DevSecOps Posture