Will Selby
Columbus
Summary
Witty and inventive security professional who thrives on thinking outside the box to solve complex challenges. I approach cybersecurity like an art form. When something captures my interest, I dive deep, uncovering details and patterns that others might miss. While I may not claim equal interest in everything, the areas that spark my curiosity fuel my best performance, driving passion, creativity, and impact.
Overview
4
4
years of professional experience
1
1
Certification
Work History
Application Security Engineer
Dematic
05.2023 - Current
- Lead application security efforts across multiple projects, performing SAST, DAST, SCA, IaC, and MPT testing.
- Built and optimized secure CI/CD pipelines, enforcing shift-left practices to identify vulnerabilities earlier.
- Partnered with developers to remediate security flaws, improving DevSecOps adoption across the organization.
- Managed CVE triage, zero-day risk, and SBOM validation, strengthening software supply chain security.
Bug Hunter
Bugcrowd
06.2022 - Current
- Triaged and reported 77+ vulnerabilities across leading organizations.
- Earned Hall of Fame recognition from companies including PayPal, Twitch, Regions Bank, Naspers, Bluehost, and Sportradar.
- Specialized in web application exploits, authentication bypass, and cloud misconfigurations.
Prisma Cloud Consultant
Palo Alto Networks
06.2024 - 03.2025
- Designed and deployed custom IaC policies for AWS, GCP, and Azure.
- Integrated Prisma Cloud into CI/CD pipelines, reducing cloud misconfigurations and enforcing compliance.
- Collaborated with engineering teams to align cloud security with organizational risk posture.
Application Security Intern
Dematic
05.2022 - 05.2023
- Conducted web app penetration testing aligned with OWASP Top 10.
- Performed SAST/DAST scans using Qualys & Veracode, and validated results against SBOM.
- Implemented IaC scanning (Checkov) & secret scanning, reducing misconfigurations in production-ready code.
Research Assistant (Cybersecurity)
Columbus State University
09.2021 - 10.2021
- Conducted network traffic analysis using TCPDump.
- Developed detection methods for Stepping-stone Intrusions using Python/Java.
Cyber Security Intern
Global Payments Inc.
08.2021 - 10.2021
- Validated HackerOne reports for private bug bounty programs.
- Updated security policy based on political/regional compliance needs.
- Reviewed and remediated low-severity submissions.
Education
B.S. - Cybersecurity & Computer Science
Columbus State University
Columbus, GA05.2023
Skills
- Application Security (SAST, DAST, SCA, IaC, MPT)
- Cloud Security (AWS, GCP, Azure Prisma Cloud)
- Secure CI/CD & DevSecOps
- SBOM & Supply Chain Security
- Vulnerability Research & Bug Bounty Hunting
- AI/ML for Cybersecurity (Data Science Applications – in progress)
- OWASP Top 10, CWE, CVE Management
- Python, Bash, Docker, Kubernetes
- Data protection
- Static code analysis
- Ethical hacking
- Reverse engineering
- Cloud security
- Threat modeling
- Vulnerability assessment
- Network security
- Intrusion detection
- Security training
- Penetration testing
Certification
- Certified AppSec Practitioner (CAP) – SecOps Group (2022-12)
- EJPT (eLearnSecurity Junior Penetration Tester) – INE Security (2022-02)
- In Progress: SEC595: Applied Data Science & AI/Machine Learning for Cybersecurity Professionals (SANS Institute)
Soccer
I'm a player for FC Fountain City Soccer Team : Located in Columbus GA. (Weekends Only)
Languages
Portuguese
Upper intermediate (B2)
Timeline
Prisma Cloud Consultant
Palo Alto Networks
06.2024 - 03.2025
Application Security Engineer
Dematic
05.2023 - Current
Bug Hunter
Bugcrowd
06.2022 - Current
Application Security Intern
Dematic
05.2022 - 05.2023
Research Assistant (Cybersecurity)
Columbus State University
09.2021 - 10.2021
Cyber Security Intern
Global Payments Inc.
08.2021 - 10.2021
B.S. - Cybersecurity & Computer Science
Columbus State University
Similar Profiles
Brian CatoBrian Cato
Field Service Technician at DematicField Service Technician at Dematic
Kevin Javier Garcia MongeKevin Javier Garcia Monge
Assembly operative at DEMATICAssembly operative at DEMATIC
Johan RamirezJohan Ramirez
Electro-Mechanical Technician III at DematicElectro-Mechanical Technician III at Dematic
Jameel JordanJameel Jordan
Central Supply Technician at East Alabama Medical CenterCentral Supply Technician at East Alabama Medical Center
Spencer GoertzSpencer Goertz
Avionics Technician at United States Air Force ReserveAvionics Technician at United States Air Force Reserve