OWASP 2026 Global Board Elections
Bio
I am a cybersecurity and software engineering professional with more than 25 years of experience spanning software development, application security, product security, and international standards development. I'm a Principal Consultant in Product Security at CyberCX. As well as being one of the project leaders for OWASP CycloneDX, and an elected member of the Ecma International Executive Committee.
My journey with OWASP began back in my software development years. From leveraging OWASP guidance and tools right through to helping lead one of OWASP's flagship projects, CycloneDX. I helped grow the project from a small opensource initiative into a globally adopted international standard used by governments, critical infrastructure providers, technology vendors, and opensource communities around the world. Along the way, I have worked closely with contributors, standards bodies, industry leaders, and public sector organisations to advance software transparency and software supply chain security.
Throughout my career, I have balanced hands on technical work with strategic leadership. I have led product security initiatives, grown and managed teams, performed hands on technical software engineering and security work, and helped organisations improve the security of products used by millions of people. I remain an active practitioner who understands both the challenges faced by individual contributors and the broader strategic needs of organisations and communities.
As a candidate for the OWASP Board, I am committed to strengthening OWASP's role as the world's most influential open security community. I believe OWASP succeeds when it empowers volunteers, supports project and chapter leaders, fosters a welcoming and inclusive culture, and delivers practical resources that help developers, defenders, and organisations build more secure software.
OWASP has had a profound impact on the security industry and on my own professional journey. I would be honoured to help guide the foundation's future, support its members and volunteers, and contribute to its mission of making the worlds software more secure for everyone.
Candidate video
Questions
What have you contributed to OWASP in the past year, and what gaps has that shown you?
Over the past year I've continued my work with CycloneDX, represented OWASP within standards bodies such as ECMA International, and actively engaged with the community through events and discussions. One gap I've observed is the need for stronger connections between the Foundation, project leaders, and chapters. Many volunteers do great work but don't always feel informed, supported, or recognized. We need to make it easier for contributors to succeed.
How have you stayed connected with the community this year, and what have you learned?
I've stayed connected through project work, conference participation, chapter engagement, industry collaboration, and discussions with contributors across the community. The biggest lesson is that OWASP's strength remains its volunteers. People want transparency, responsiveness, and practical support so they can focus on delivering value rather than navigating process.
With so much attention on AI, how would you make sure other OWASP projects and contributors still get support?
AI is important, but OWASP's mission is broader than any single technology trend. We should support AI related initiatives while maintaining balanced investment across flagship projects, chapters, education, standards, and emerging efforts. Success means growing the overall pie, not shifting resources away from existing contributors.
How would you improve and expand OWASP's fundraising?
I would focus on diversifying revenue streams while preserving OWASP's independence and vendor neutrality. That includes strengthening corporate partnerships, expanding sponsorship opportunities, increasing support for training and events, and demonstrating clear value to donors through measurable community outcomes. Sustainable funding allows us to invest more in projects, chapters, and contributors.
Paid individual membership is falling. How would you show its value and get more people to join?
From the numbers I have seen, membership numbers aren't falling. However, people join when they see a clear connection between their contribution and community impact. We need to better communicate how membership supports OWASP's mission while also creating tangible benefits such as greater access to community engagement, learning opportunities, and recognition. Membership should feel like participation in a movement, not just a transaction.
Why do you think long time contributors and projects are leaving OWASP, and what would you change?
In many volunteer organizations, contributors leave when they feel unheard, unsupported, or disconnected from decision making. We should proactively engage project and chapter leaders, reduce unnecessary friction, improve communication, and recognize contributions more effectively. Retention starts with making contributors feel valued and empowered.
If you had been on the Board when the website redesign was approved, what would you have done differently?
I would have sought broader community input earlier, established clear success criteria, and ensured there was a detailed migration and communication plan before implementation. Large changes can be necessary, but the community should understand the goals, tradeoffs, and expected outcomes before they occur.
Does OWASP still reflect its founding values? What has been kept, what has been lost, and what would you change?
OWASP continues to reflect many of its founding values, especially openness, community collaboration, and vendor neutrality. As we've grown, some contributors feel more distant from decisions that affect them. I would focus on strengthening transparency, community engagement, and accountability so that OWASP scales without losing the community driven culture that made it successful in the first place.
Slack