Stephen Haywood

About Stephen Haywood

Empathetic, respected, team-focused, information security leader whose areas of expertise include security engineering, software development, penetration testing and system administration, with a proven ability to build, mentor, and lead a remote, diverse, geographically dispersed team.

Experience

1. Senior Manager, Application Security

   EDB

   Feb 2025 — Present

   Manage an international, remote, team of Application Security engineers focused on maturing the application security program at EDB. Created a three year roadmap, including head count recommendations, to align the application security program with the Common Controls Framework and have made significant progress towards completing the first year goals. Worked with development teams to write both control and operational procedures for secure software development, risk analysis, and vulnerability management. Worked cross-functionally with the Product Management, Legal, Sales, and Documentation teams to develop a comprehensive CNA management and CVE disclosure process. Worked with Staff Engineers to develop procedures and a work queue for Code Reviews and Design Reviews. Assisted in aligning the application vulnerability management program with FedRAMP requirements. Currently leading the team to build out a role-based security training program and a Threat Modeling process. Oversee the application vulnerability management, CVE disclosure, penetration testing, and bug bounty programs.

Education

• King University

  Bachelor's degree, Mathematics and Computer Science

  1996 — 2000