About Aspect's Management Team


CEO - Jeff Williams

Jeff Williams is the CEO and a cofounder of Aspect, where he is responsible for strategic direction for the company and research and development efforts. Prior to founding Aspect, Jeff had a leadership role in the worldwide security consulting practice at Exodus Communications. Jeff also serves as the chair of the non-profit OWASP Foundation.

Jeff has specialized in information security since 1989 and has published numerous papers focused on practical risk and assurance techniques. Jeff has been writing code for 25 years in many different environments but has focused primarily on Java and J2EE security for the past 10 years.

Jeff is a primary author of the OWASP Top 10 Web Application Security Vulnerabilities and the OWASP Secure Software Development Contract Annex, and he leads several OWASP projects. He also chaired the group responsible for creating ISO 21827, the Systems Security Engineering Capability Maturity Model (SSE-CMM).

Jeff has undergraduate degrees in Psychology and Computer Science from the University of Virginia, an MA in Human Factors Engineering from George Mason University, and a JD cum laude from the Georgetown University Law Center, where he specialized in intellectual property and cyberlaw.

contact Jeff by email at jeff.williams 'at' aspectsecurity.com


COO - Dave Wichers

Dave Wichers is the COO and cofounder of Aspect, where he is responsible for running daily operations of the company. Prior to founding Aspect, Dave started and ran the application security practice at Exodus Communications, which provided a full suite of application security consulting services to Fortune 500 and other commercial companies starting in1998.

Dave has focused on information security during his entire career, starting in 1988. His information security background spans the entire security engineering lifecycle, including software development, system security requirements, security architectures, secure designs, security policies, models, and system testing. He has supported the design and development of trusted operating systems, trusted databases, secure routers, multilevel secure guards, and large integrated systems for a wide variety of customers, including NSA, DoD, and Fortune 500 vendors and end customers.

Dave is a primary author of the OWASP Top 10 Web Application Security Vulnerabilities and is the OWASP Conferences Chair. He was also a primary contributor to the group responsible for creating ISO 21827, the Systems Security Engineering Capability Maturity Model (SSE-CMM).

Dave earned a B.S. summa cum laude in Computer Systems Engineering from Arizona State University and an M.S. summa cum laude in Computer Science from the University of California at Davis. Dave holds both CISSP and CISM certifications.

contact Dave by email at dave.wichers 'at' aspectsecurity.com

 

VP of Business Development - Bill Husted

Bill Husted draws on 20 years of industry experience including sales, product management, and software development, to lead Aspect's commercial business development efforts. In this role, Bill is responsible for driving direct sales and development of strategic partnerships.

Prior to joining Aspect, Bill was Vice President of Sales and Marketing for Clean Communications, a managed security service provider. As Vice President of Web Hosting Services for PSINet, Bill's team was responsible for the development and sales of PSINet's Web Hosting services – a business unit that experienced over 300% annual growth and accounted for 60% of new sales in the US.

Bill started his career selling to enterprise accounts such as GE and Blue Cross Blue Shield for MCI and Digital Equipment Corporation. Bill holds a Bachelors Degree in Computer Science from the University of Louisville.

contact Bill by email at bill.husted 'at' aspectsecurity.com


VP of Services - Noelle Hardy

Noelle Hardy has been helping commercial and government clients address their information security needs for over 17 years. She has extensive experience helping clients assess their security needs and deploy appropriate and practical security controls. She has also been directly involved in the design and development of several commercial and high assurance security products.

As the Vice President of Services for Aspect Security. Noelle is responsible for managing Aspect’s application security consulting services, defining new areas of business, and establishing corporate direction. Prior to joining Aspect, Noelle managed the Incident Manager product line for Symantec Corporation where she was responsible for defining direction, establishing priorities, and coordinating release activities.

Before joining Symantec, Noelle established the east coast security services practice for Exodus Communications, where she was responsible for developing service offerings, business development, service delivery, as well as directly supporting key clients. Noelle began her career with Trusted Information Systems, Inc. (now Network Associates) where she played a key role in the design, development, and evaluation of several secure high assurance operating systems and products.

Ms. Hardy has a BS in Electrical Engineering from the University of Maryland and a MS in Computer Science from John Hopkins University. In addition, Ms. Hardy is an NSA certified Vendor Security Analyst and holds CISSP, CISM, and SANS GSEC certifications.

contact Noelle by email at noelle.hardy 'at' aspectsecurity.com


Acceleration Services Practice Lead - John Pavone

John Pavone is Aspect's Acceleration Services Practice Lead, specializing in the enablement of application security within organizations.  John has been an IT professional for over 20 years.  In the last 12 years, John has concentrated solely on Information and IT Infrastructure Security. 

John held various security related management positions, including the chief security architect for a large financial services firm.  In this role, John established an enterprise–wide IT security program utilizing a quantitative risk assessment and mitigation approach with a direct line of sight to the organization’s corporate dashboard.  Other major accomplishments include the development and mainstreaming of an IT risk management process, the creation of an application vulnerability testing lab, and the security design and implementation of an enterprise single sign-on and authorization system.

John holds dual degrees in Mathematics and Computer Science from West Chester University.

contact John by email at john.pavone 'at' aspectsecurity.com