I have over 20 years of experience in the information security field. I am both a technical security practitioner as well as a strategic advisor, with experience spanning from manual source code review, to network pen-testing, to AppSec program strategy, governance, and consulting.