Paco Hope

Background

About Paco Hope

Paco Hope has 20 years experience securing software and systems. Key competencies in cloud security, application security, and infrastructure security. Today Paco runs a small team inside AWS Global Services ensuring that AWS staff protect our customers while working for them in Professional Services engagements. Engagement Security provides code templates, policy guidance, and operates internal mechanisms to ensure that thousands of consultants execute thousands of engagements annually for thousands of customers. His team operates internal services as well as assisting in incident response and third party risk assessments. Previously at AWS, Paco was a consultant to the biggest enterprises, helping them secure their cloud workloads on AWS. He worked with data encryption at rest and in transit, identity and access management, reliability, scalability, cloud forensics, and cloud incident response. He is a subject matter expert on the AWS Certified Security - Specialty certification and a named contributor to the AWS Incident Response white paper. His experience covers web applications, mobile software, and business-to-business transaction systems. He has assessed systems for small startups with thousands of lines of code, and massive enterprises with thousands of applications and millions of lines of code. He has worked in financial services, online retail, and the online gaming industry. Mr. Hope has co-authored two books on software security: the Web Security Testing Cookbook and Mastering FreeBSD and OpenBSD Security. He has also authored a chapter of Gary McGraw's Building Security In.