Percy Rotteveel

Redwood City, CA · percy@rotteveel.ca

Scan contact card

Senior Application Security Consultant

“The only way to do great work, is to love what you do.” — Steve Jobs

My roots and passion lie within the Application Security (AppSec) Industry, and in this phase of my career, I have decided to return to what I do best and enjoy the most.

Hire an internationally accomplished, hands-on Senior AppSec Consultant and receive 25+ years of overall Cyber Security experience.

Certifications

Socialization

Skills

Application Security

Security Policy
Security Requirements
Vulnerability Management
Compliance Validation
Architecture Review
Integration
Education
Threat Modeling
Manual Code Review

Application Security Testing

SAST
SCA
DAST
IAST
RASP

Platform Development & Administration

Atlassian
Jenkins
Bamboo
Bitbucket
GitHub
GitLab
MediaWiki

Containers & Cloud

Languages, Operating Systems & Tools

c
c++
Java
PHP
Python
git
subversion
linux
bash
javascript
typescript
c#

Data Management

Microsoft SQL Server
Oracle
MySQL

Architecture

IP Networking
DNS
Firewalls
SaaS/PaaS/IaaS

Projects

International Medical Device Supplier

HIPAA being the business driver, Application Security (AppSec) had to be build into the existing DevOps of an acquired company.

International Software Company

The existing Application Security (AppSec) Program was too disjointed, which resulted in an unclear picture of the security posture of the application portfolio. Plus, the program was too expensive.

MANUS 360 leveraged Percy's highly competent knowledge, skills, and ability to benefit a healthcare client. The organization needed assistance in accounting for information security requirements. Percy was instrumental in assessing the state of the organization but also contributed to a strategy to implement an application security program. We look forward to working with Percy on other engagements in the future.

Habibeh Deyhim

Strong work ethic, highly skilled, dedicated, deep technical expertise, team work is something that comes to my mind when I think about Percy! He is extremely supportive of the team, makes sure everyone is equipped to get the job done. He leads by example making sure the projects are delivered on time and to the best quality. He is an all round great guy to work with. I highly recommend Percy to anyone who has a potential opportunity to work with!

Include Security, LLC

Percy has helped us tremendously this past year. He implement a range of processes and procedures around our workflows including Tech PM project dashboard, Consultant interest & skills tracking application, he also improved individual performance, cohesion and collaboration within our Tech PM team. I'd like to thank Percy for the strategic leadership he brought to the company, his high level of integrity and his good sense of empathy. I consider him a good friend and wish him all the best in his future endeavors.

Wait! There's more..

See all Testimonials

Experience

Senior Application Security Consultant

Rotteveel Consultancy LLC

Develop, implement, and administer application security (AppSec) programs and infrastructures.
Recruit and mentor AppSec engineers with effective coaching and training techniques .
Liaise with a cross-functional organization to integrate security into the product lifecycle from design through deployment.
Identify application security requirements, conduct application security assessments, and present developers with remediation guidance and advice.
Carry out code analysis and utilize both static and dynamic application security testing (SAST/DAST/SCA/IAST/RASP) solutions while conducting manual vulnerability analysis.
Facilitate, prioritize, and validate the urgency of mitigation of product vulnerabilities and security feature enhancement requests by operating closely with product development/marketing teams.
Transcribe policies, procedures, and protocols to incorporate AppSec into the software development life cycle (SDLC, DevOps, Agile, Waterfall, etc.).

November 2022 - Present

Global Director AppSec Solutions

Micro Focus

Set forth global AppSec sales strategies and shared impactful knowledge and experience.
Assisted customers in establishing, implementing, and maturing their AppSec Program while executing with Fortify sales and pre-sales specialists across the world in key Fortify accounts.
Designed a scalable framework that assists cross-organizational teams to drive value for all the Fortify customers through optimal use of Fortify in the AppSec Program.

June 2021 - November 2022

VP Security Consulting

Include Security LLC

Played a significant part in identifying and applying some of the best security assessment talent to benefit clients worldwide.
Enabled the company to grow and scale successfully and implemented a variety of operational improvements through robust strategy and planning.
Implemented and optimized processes and procedures to identify, track and improve AppSec talent, including dashboards.
Optimized performance, cohesion, and collaboration within the IncludeSec teams to the highest level to ensure and enhance staff execution, delivering excellence to business clients.

February 2020 - February 2021

Global Head CS for RASP

Imperva (Prevoty)

Headed a firm that provides Real-time Application Security Protection through an attack detection technique known as LANGSEC, ensuring alignment of detection to the evolving threat landscape.
Designed effective strategies to ensure product capabilities aligned with -and created- customer success framework to drive key decision-making, resource planning, and improve customer results.
Built a scalable customer success organization that delivered real results, to include demonstrative ROI through successful deployment, adoption, integration, and utilization of Imperva RASP solutions.
Identified requirements and strategy to ensure that customer feedback was effectively translated into product features to address the threat landscape, as well as business, customer, and associated needs.

September 2017 - January 2020

VP Global Security Services and Support

Synopsys (Software Integrity Group)

Spearheaded the development and structuring of an effective and efficient Global Security Services and Support (GSS) organization comprising Technical Support, Customer Success, Professional Services, Customer Education, Sales Engineering, and Solution Architects.
Created the strategy to establish a security product portfolio, including installation, adoption, and expansion of the portfolio management.
Optimized and streamlined customer feedback processes, and improved alignment and collaboration with R&D and marketing which resulted a $15M revenue increase.
Improved quality, effectiveness, and efficiency of customer support and ensured positive customer experiences consistently.
Enhanced cross-functional collaboration within GSS that resulted in increasing year-over-year growth for professional services and customer satisfaction for technical support by 100% and intensifying product renewal rate from 70% to 85% for customer success.
Slashed attrition rate from 25% to 10% and augmented average consultant utilization rate from 65% to 85%.

September 2015 - August 2017