Warrie Proffitt

Background

About Warrie Proffitt

Who am I? I am a Senior Security Consultant with Black Duck, leading a team of penetration testers for a Fortune 20 client. With 4+ years of consulting experience, I’ve worked with teams at various stages of maturity, from greenfield clients who are looking to establish their software security initiatives, to mature clients who are looking to improve coverage or efficiency. What do I do? I help organizations develop, mature, and improve their Application Security and Product Security programs! Working with clients to identify areas of friction or capability gaps within their SDLC, I help to build custom plans that transform their software security initiatives. Whether you’re looking to reduce friction between security and development, improve the efficacy of your defect discovery capabilities, or improve coverage and insight into development activities, I strive to build a program that fits your needs. What can I do for you? In no specific order, here is what I can bring to your organization- Conduct vulnerability assessment and penetration tests for web applications and services. With 4+ years of conducting and leading penetration tests, I have the necessary skills to not only augment but improve your penetration testing team- Lead a team of security experts. Since 2024, I have been leading a dedicated client team of penetration testers supporting a leading provider of cloud computing. In this role I’ve shaped and improved internal processes that allow Black Duck to efficiently deliver high quality reports. On a daily basis, I oversee the scoping, execution, and delivery of penetration tests and provide mentorship and growth opportunities for a talented team of assessors- Inform and guide development teams and individuals. As a Security Consultant, my primary responsibility has always been to ensure security findings are effectively communicated to developers so they have the necessary information to resolve security issues. Do you developers understand how to fix a vulnerability? Do they know how the vulnerability was introduced to their software? Are there capabilities that can be implemented into the SDLC that allow developers to identify security defects earlier in development? These are just a few of the questions I’ve helped to answer in my time- Transform your SDLC into a Secure SDLC. I will help your organization develop new security capabilities, implement automation, and reduce friction across your SDLC to ensure you have the ability to identify, track, and remediate security defects.