Now an internal security consultant with NetSuite, I was software security consultant with Fortify Software for 8 years. I've been implementing secure development solutions with Fortify SCA since 2007.
It's the software, stupid :-)