Thomas Pavan is a Certified Information Systems Security Professional (CISSP) with over 20 years of IT experience, specializing in implementing application security throughout the CI/CD delivery pipeline by applying DevSecOps principles. He has held roles such as software QA architect and manager, and security technical enablement across various industries, including banking, e-sports, insurance, and security software. He has also led digital modernization and security efforts for different technology stacks.
With extensive experience in all phases of the SDLC, Thomas provides a unique perspective on securing and hardening the entire software delivery process. He calls himself a "DevSecOps Fundamentalist" because he has witnessed the benefits of this practice firsthand. His skillset includes penetration testing, SAST, DAST, RASP, IAST, training, coaching, and integrating security solutions with clients' existing processes.