About Chris Eng

Chris Eng is Chief Research Officer at Veracode. A founding member of the Veracode team, he is responsible for all research initiatives including applied research and product security, as well as advising on product strategy and M&A. Chris has led projects breaking, building, and defending software in a cybersecurity career spanning over two decades. Chris is a frequent speaker at industry conferences and serves on the review board for Black Hat USA. He is also a charter member of MITRE's CWE/CAPEC Board. Bloomberg, Fox Business, CBS, and other prominent media outlets have featured Chris in their coverage. Prior to joining Veracode, Chris was a Principal Consultant and Technical Director of @stake (later acquired by Symantec), where he led high-profile security assessments for Fortune 100 companies, with an emphasis on web applications, commercial software, and network infrastructure. His early work laid the foundation for @stake’s application penetration testing methodologies, and he later served as technical leader and global facilitator for Symantec’s Attack and Penetration Center of Excellence. Previously, Chris was an Electrical Engineer for the US Department of Defense, where he conducted vulnerability research and developed tools used by the NSA Red Team to perform penetration tests on government and military networks. Other work at NSA included analyzing embedded systems and ASICs.