My experience spans over 25 years of engineering in the public, financial and telecoms sectors. I am an Agile Fundamentalist and AppSec Snooper. The principles of the agile manifesto form the basis of good practices. It boils down to lots of common sense, small steps, learning along the way, not writing code that nobody will want or need and taking processes and procedures with a pinch of salt.

I want to make security more approachable and more pragmatic, more agile. The only way to deal with a deluge of vulnerabilities, bad practices copied from StackOverflow or hallucinated by an LLM is to bring security together with development.

Recently, I’ve become a head of engineering, where I swapped working with code to working with people. That suits me fine as I’ve bastardised the 80:20 rule: Software engineering is 80% social and only 20% technical.