Thought Leadership

Sean Barnum, CSSLP, Principal Consultant

Sean Barnum

Sean Barnum has responsibility for federal services clients. He has 20 years of experience in the software industry in the areas of development, software quality assurance, quality management, process architecture and improvement, knowledge management and security. He was previously Director of Knowledge Management with Cigital and a Senior Director of Knowledge Management, Process & Quality for Covansys, a mid-sized global technology consulting firm.

Sean is a frequent speaker at regional and national software security and quality conferences, seminars and events. He is active in the software assurance community and is involved in numerous knowledge standards-defining efforts. Among these are the Common Weakness Enumeration (CWE), the Common Attack Pattern Enumeration and Classification (CAPEC) and other elements of the Software Assurance Programs of the Department of Homeland Security and the Department of Defense. His technical expertise covers software security, software quality and process improvement, risk management, knowledge architecture and collaborative technologies. He has a BS in Computer Science and is an ME in Technology Management candidate from Portland State University.

Download print-quality JPG / More about Sean


Paco Hope, Technical Manager

Paco Hope

Paco Hope is a Technical Manager with Cigital, Inc. and has 12 years of experience in the security of gaming systems (lottery systems, online gaming, casino gaming devices), web applications, operating systems, and embedded devices (e.g., mobile phones, smart cards). As a consultant, his customers include MasterCard International, WMS Gaming, GTECH, FINRA (the US securities exchange regulator) and Sterling Commerce (an AT&T Company). Paco leads Cigital's efforts in online gaming security, including random number generator (RNG) certification and the SafeBetTM online gaming security certification. He co-authored the Web Security Testing Cookbook and Mastering FreeBSD and OpenBSD Security, both published by O'Reilly and Associates. Paco is also a prior co-chair of VERIFY, an international conference on software testing.

Download print-quality JPG / More about Paco


Scott Matsumoto, Principal Consultant

Scott Matsumoto

Scott brings over 20 years of commercial software product development experience to the company. His projects at Cigital have focus on security architecture for enterprise service-oriented environments. His experience encompasses development of component-based middleware, performance management systems, graphical UIs, language compilers, database management systems and operating system kernels.

Most recently Scott was the CTO of Spring Street Networks. Prior to that he was co-founder and CTO of Xtremesoft, which provided component-based application monitoring for Microsoft technology-based applications. Scott has held positions at other major software companies such as systems architect for Lotus Development. Prior to Lotus, Scott was a principal at Working Set, Inc., the software company that designed and implemented Digital Equipment Corp.'s SQL compiler. He was also one of the original designers of Digital's Relational Database system.

Scott is a founding member of Cloud Security Alliance and was also a member of the Hotel Technology Next Generation's Architecture Workgroup.

Download print-quality JPG / More about Scott


Sammy Migues, Principal - Technology

Sammy Migues

Sammy is an information security visionary with a proven record of entrepreneurial innovation, intellectual capital development, practical business solutions, and performance optimization. He has extensive day-to-day experience in chief technologies, applied R&D, and evangelist roles, working directly with customers, product management and product development.

At Cigital, Sammy works daily with customers and Cigital's best and brightest to keep corporate knowledge and people on the cutting edge of software security and quality, while also working on product innovation, software security course creation, and risk modeling and management. In previous positions, Sammy was VP, Knowledge Management at Cybertrust (formerly TruSecure) and Chief Scientist at iDEFENSE. Sammy is frequently sought out for press relations, TV, conference speaking, classroom instruction, executive briefings, and related knowledge transfer. He holds a BS in Computer Science and a Master's degree in Information Security.

Download print-quality JPG / More about Sammy