I have 2 decades of professional IT security experience, starting as an administrator but very soon became an IT security consultant for international clients worldwide.
Having a strong technical background (I did perform pentests, application tests, network audits, source code audits, reverse engineering tasks, reviewed security architecture and much more), i have now a strong focus on 1) building security teams by 2) evaluating and support companies in enhancing a it security culture. I also believe that a lot of our recent (and also ancient) it security probiems steam in a much more fundamental basis, one of which the technical approach is one valid, but definitely not the only one.
