I'm an application security consultant, and also 10 year contributor to OWASP (www.owasp.org). I was on the OWASP Board from 2004 through 2013, launched the OWASP AppSec Conferences, and currently run the OWASP Top 10 project, among other things.