Paco Principal Security Consultant running a team called Engagement Security at AWS. Based in Virginia, USA he works with organisations to make their cloud applications secure. He used to do application security consulting with Cigital, before they were bought by Synopsys.

I was a subject matter expert with ISCĀ² and previously helped define certifications like the CISSP and CSSLP. That organisation has taken a turn for the worse in 2022, and I no longer hold their certifications nor volunteer my time to help them.

Paco speaks fairly often at industry conferences like:

Contact Me

Easiest way to contact me is via email. I can also be found on social media. Mainly on and the Infosec Exchange.

Facebook? Forget it. I don’t do anything important there and neither should you. LinkedIn? Yeah, sorta. I login once a month or so.

Turns out I have identities on virtually every social media platform, and they’re all pacohope. So Skype, Twitter, Reddit, YouTube, gmail, whatever. That’s your best bet.