McLean, VA, United States
Application Security Engineer/Security Architect. Previously, 15 years as a software engineer/developer. Focus is on secure code reviews, manual or driven/assisted by static and dynamic scanners. I work with Fortify, Checkmarx and Coverity on the static side (recent foray into SonarQube with Java scanner plugin and custom rule creation) and AppScan, W3AF, Nikto, WebInspect, various others on the dynamic side. Java security is also a main focus. I also provide secure coding guidance to the development teams as well as various security architect activities.
I have been working as a professional IT employee for over 25 years.