He was worked at Symantec for more than five years and been active in computer security community since the late 90's (primarily known for his early research on heap overflows).