He's been doing web development since the late 90s, starting out as a graphic designer, then gradually shifting focus to development. He is in no way a security expert, but a firm believer in staying curious and asking questions.