Derek Evans

Derek Evans been in the application security sector for 15 years, working in eight different industries and rising through the ranks to serve as AppSec and DevOps director. At the tactical level, he has worked to advise clients on implementation and maturity of their software security initiatives, security assessment programs (penetration testing, DAST, SAST, SCA, threat modeling, IAST, etc.), integration of security activities in the SDLC and CI/CD automated pipelines, and software security risk management. As a Managing Consultant, Derek is responsible for delivery of services and for technical leadership.