Your First Class Security Team

Chris Eng

Chris Eng
Senior Director, Security Research

Chris Eng, senior director of security research, leads the Veracode research lab, which is responsible for integrating security expertise into Veracode’s technology. He monitors attack trends, analysis techniques, and other advances in application security to ensure Veracode’s service offering addresses timely and relevant threats.

Mr. Eng has over 10 years of professional experience in information security. Prior to joining Veracode, he was a Technical Manager for Symantec Professional Services, where he led security assessments for Fortune 100 companies, specializing in penetration testing of critical web applications, commercial software, and networks. While serving as a technical leader and global facilitator for Symantec’s Attack and Penetration Center of Excellence, he designed, implemented, and maintained a centralized, distributed penetration testing and reporting infrastructure that enabled consultants worldwide to deliver penetration tests in a streamlined, consistent manner.

Before joining Symantec through acquisition in 2004, Mr. Eng was a Principal Consultant and then Technical Director of @stake, Inc. In addition to consulting, he led the development of WebProxy, a proprietary web application testing tool which became an @stake product in 2002, pre-dating other modern proxy-based web security tools. He also authored internal whitepapers on penetration testing which laid the groundwork for @stake’s delivery methodologies.

Prior to @stake, Mr. Eng was an Electrical Engineer for the US Department of Defense. As a member of the National Security Agency’s “Red Team,” he conducted vulnerability research and performed penetration tests to strengthen the security of US government and military networks. His prior work at the NSA consisted mostly of hardware-related pursuits, with an emphasis on analyzing/testing embedded systems and ASICs.

Mr. Eng has presented on application security topics at the Black Hat Briefings and has been quoted in industry publications including CIO Magazine, eWeek, Dark Reading, and Information Security Magazine.

Mr. Eng earned his Bachelor of Science degree in Electrical Engineering and Computer Science from the University of California in Berkeley, CA.