I'm a security professional for a small(ish) SAAS provider. I'm responsible for most aspects of security and security policy. I am IT turned developer by background and I specialize in Secure Software Development Lifecycle issues, but I have a broad knowledge in security from twenty years in the business.