About Your Experience with Veracode & Community 

What are your current role and your responsibilities in your company?

My role is Senior Software Security Engineer at Parallels. We have several products that span Mac, Windows, Linux, and Chrome OS. We use Veracode for our Remote Application Server, and are expanding to include Parallels Desktop, Parallels Toolbox and Parallels Access. The code base is huge, and the languages vary from the classic C++ and Java to shell scripts and python. 

As the senior security officer, we absolutely need to protect our customers. I view this as a personal responsibility. It is my only responsibility. Our products are used by governments, educational and research facilities around the world. A working attack would affect a huge number of people!  

What are your interests in the AppSec space?

What interests me in AppSec is the idea that I’m going to battle against evil geniuses every day. I hate bullies and scammers. The other huge draw for me is that the field is constantly evolving. I can’t see enjoying work where everyday you do the same thing over and over. The constant learning is a great bonus for me.

Which Veracode product(s) do you use? What problems were you trying to solve, and how did the product(s) help you achieve your goals?

Currently we only use the Static scan, but I’m also bringing in SCA, and want to move into Dynamic scanning and penetration testing. I’ve done pen testing in previous jobs and loved it!

When did you join the Veracode Community? What motivates you to contribute to the Community?

I got involved when I first started using the product. I prefer to make new mistakes and not repeat other peoples mistakes, therefore learning from other AppSec professionals within the Veracode community is a huge asset to me. I also love the idea that as security professionals, we can team up to help each other. There is so much to do and so many open jobs that helping someone isn’t going to harm my job security, I’ve worked in a company where people thought that their knowledge ensured their jobs. In a role that is supposed to enhance safety that seems like a dumb idea.

About You

Tell us a little about yourself. What do you do outside of work?

I used to be a licensed mechanic, I still love playing with my cars. I have a 1961 Landrover, a 1985 Jag XJS-12, a 1985 Landcruiser and a 1995 Sidekick. That takes time. 

I also started rock hounding, something I did as a child. I gave that up in my teenage year as I thought girls might take me for “granite!”

I still often program for fun. I am currently making a home dashboard that includes my Ambient weather station, security camera system, Tesla PowerWall and home automation system.

My part time job is firing large firework shows. Recently I did the Canada Day show in Sydenham Ontario.