Jeroen Willemsen

CTO

Netherlands18 yrs 9 mos experience

Highly Stable

Key Highlights

Expert in secure software development and threat modeling.
Proven track record in building security teams.
Strong focus on modern platform security and automation.

Stackforce AI infers this person is a Security Architect specializing in Mobile and Web Application Security.

Contact

jeroenwillemsen2001@gmail.com LinkedIn

Skills

Core Skills

Secure Software DevelopmentThreat ModelingMobile SecurityRisk ManagementWeb Application Development

Other Skills

Amazon Web Services (AWS)AndroidApplication SecurityArchitectureArchitecturesBlackberryBusiness AnalysisCChange ManagementCloud SecurityComputer ScienceConducting security workshopsCreating abuse and misuse casesCreating awareness for security issuesDatabases

About

OWASP lead (previously OWASP MSTG, now Wrongsecrets) Specialties: Research; (Full Stack) Application development; (Security/Risk) analysis and methodic approaches (Software/IT/Infra: patterns & architectures, Business: architectures), threat modeling, hacking, building security teams. Current focus: software development, security automation & validation, threatmodeling, modern platform security (Docker, AWS, Kubernetes, etc.), coaching & assisting development teams.

Experience

Undisclosed

Principal Security Architect

Apr 2022 – Present · 3 yrs 11 mos

Xebia

3 roles

Principal Security Architect

Promoted

Mar 2017 – Mar 2022 · 5 yrs · Hilversum

Consultant Secure Software Development (Security consultant/Developer)

Promoted

Nov 2015 – Mar 2017 · 1 yr 4 mos · Hilversum

Areas of expertise:
Integrating security in Agile environments
Integrating security tooling in CI/CD
Creating abuse and misuse cases
Threat modeling, manage (information security) risks
Penetration testing, ethical hacking, security testing
Creating awareness for security issues within other services offered by Xebia
Secure software development
(Mobile) Security research
Give security workshops, trainings and talks

Integrating security in Agile environmentsIntegrating security tooling in CI/CDCreating abuse and misuse casesThreat modelingPenetration testingEthical hacking+7

Full stack developer

Mar 2013 – Nov 2015 · 2 yrs 8 mos · Hilversum

Full stack developer with a focus on mobile Security.

Domus technica

2 roles

Senior Consultant mobile security

Promoted

Aug 2012 – Mar 2013 · 7 mos

Risk and security management of mobile application development, mobile device management and related processes and infrastructure.
Defining and transforming architectures (infra/logical/business/etc), with a specialization in mobile application development and mobile device management.
Development of mobile applications.
Mobile device hacking.
Other than that, I am still involved in multiple research areas (Cloud, security, WSNs) and have been requested by multiple clients to do research on several other topics as well.

Risk and security managementDefining and transforming architecturesDevelopment of mobile applicationsMobile device hackingMobile SecurityRisk Management

Consultant / researcher

Jan 2009 – Sep 2012 · 3 yrs 8 mos

Developping several web-applications, reforming and defining strategies & architectures and doing research in several topics (mobile (application) security, mobile device management and mobile integration), virtualisation, IAM, Jericho, COA, etc.. Helping out clients with their mobile application/security/device management/etc.

Developing web applicationsReforming strategies and architecturesResearch in mobile securityVirtualizationIAMWeb Application Development+1

Capgemini

2 roles

graduation internship

Feb 2008 – Dec 2008 · 10 mos

Worked on an international researchproject to detail the Collaboration Oriented Architecture Framework from the Open Group. Researched how TOGAF, SOA, SaaS, CobiT and other topics could add value to this framework and vice a versa.
The project was rewarded with the "Anette Roetersprijs".