Checkmarx

With a focus on people, process, and technology, I currently help companies identify and evaluate opportunities for Application Security growth and maturity.

DevSecOps Enterprise SE

National Channel SE

Ernst & Young

Architecture, automation, development, and management of the enterprise operations and resources for application security services, including DevSecOps, application testing, and vulnerability management for the Fortune 100.

Manager, Advisory Cyber Security

Vaunted Security

At Vaunted Security, we focus on making best-of-breed products better.  Vaunted Security is the leading provider of software solutions for Hewlett-Packard Enterprise, Inc.'s, class-leading static analysis security testing (SAST) suite, HPE Fortify Software Security Center (SSC) and Fortify-on-Demand (FoD).  It was founded by software developers and application security consultants with over 50 years of combined experience.

Co-Founder and Principal

Vaunted Group

Our expertise is in the discipline or practice of Software Security Assurance (SSA).  At VG, we focus on early initiatives that have the greatest impact at reducing risk around software applications.  These efforts include, but are not limited to:  Security Requirements, Threat Modeling, and the integration of SAST and DAST into the SDLC.  Strategically, VG partners with companies to build effective SSA programs, including a closed-loop vulnerability management lifecycle, mitigating risk coming from software security vulnerabilities as they are discovered.

Founder and Principal

HP Enterprise Security

Primary responsibilities include managing a team of application security consultants, business development, and sales support. Focused primarily on the use of the HP Fortify suite of products, my team provides strategic and tactical consulting for the integration of security into the SDLC (software development life cycle). I am also responsible for scoping engagements, creating statements of work, and providing for a trusted partnership between HP and our customers.  Overall, I worked with customers to integrate security in support of their business objectives.

Managing Principal

FishNet Security

Primary responsibilities include managing a team of eighteen application security consultants, business development, and sales support. As director, I am also responsible for project oversight and quality control, offering management and development leadership, and speaking at conferences and industry events.

Managing Director, Application Security

Specialist in application security at FishNet Security.  Perform application security assessments, source code reviews, SDLC+SDL process improvement and application security policy development.  Serve as an instructor for FishNet Security's Threat Modeling classes to help others understand vulnerabilities as they pertain to a particular application or process.

Sr. Security Consultant

Halliburton Company

Application Security is my current passion.  From creating to refactoring an SDLC to performing black and white-box testing to manual code review...I have done it all.  Having been a developer for over 15 years really helps to contribute to my success in this area.  I use dynamic testing tools like WebInspect as well as static code review tools, like Fortify.

Application Security Lead

Instant Messaging Age Software, Inc

Co-wrote a compliance solution for public instance messenger clients (Yahoo, MSN, AIM, G-Talk, etc) that was cloud hosted...before there even was 'a cloud', that provided such capabilities as an encryption layer that allowed for encrypted conversations and the transmission of sensitive data, in a peer-to-peer fashion, using blowfish encryption, alerting, based on key-words used in conversations, and centralized logging of all conversations at an organization, regardless of IM platform.  The company was eventually sold to Presensoft.

Co Founder and Development Architect

Enron

Wrote the commercial billing system for SoCal Edison and PG&E and reported on Enron retail energy transactions using custom developed SQL for reporting to the SEC.

Senior Reporting Consultant

BindView Development

Primary responsibilities included C++ architecture, development, and delivery of commercial network management and compliance software for a public software company.

Software Engineer

I am a proven cybersecurity leader with over 25 years of technical and business experience.  

Beginning as an shrink-wrap software developer for an enterprise security software company, resulting in a successful IPO, and continuing through management advisory services and enterprise software sales, my deep technical and business knowledge has led to a proven track record of effectively building and maturing Development, Application Security, and DevSecOps teams, programs, and practices.  

With a focus on people, process, and technology, I currently help companies identify and evaluate opportunities for Application Security growth and maturity.

cissp, csslp, cism, cxce

Taplio

Mark Feferman's Linkedin Analytics

Mark Feferman

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Mark Feferman's Linkedin Analytics

Mark Feferman

Want to drive more opportunities from LinkedIn?

Mark Feferman's Linkedin Analytics