Roy Shoemake
Sr. Principal Penetration Tester
United States
Summary
👤
Senior🎓
Top SchoolRoy Shoemake is a seasoned penetration tester and security engineer with over a decade of hands-on experience uncovering and remediating complex vulnerabilities across web and mobile applications. Currently a Sr. Principal Penetration Tester at Veracode, he specializes in manual, logic-driven assessments that find authentication flaws and business-logic gaps missed by automated scanners. His background spans offensive security leadership and vulnerability analysis at Cerner and consulting roles, and he holds an MS in Computer and Information Systems Security. Roy also contributes to open-source security tooling—enhancing DefectDojo’s Netsparker parser—demonstrating a practical inclination toward improving vulnerability management workflows. Lately he’s focused on the emerging security challenges around AI and large language model integrations, blending traditional pen test rigor with forward-looking threat analysis.
8 years of coding experience
10 years of employment as a software developer
Bachelor of Science Information Technology, Bachelor of Science Information Technology at Strayer UniversityMaster of Science - MS Computer and Information Systems Security/Information Assurance, Master of Science - MS Computer and Information Systems Security/Information Assurance at Dakota State University
Github Skills (10)
vulnerability-management10
parser10
parsing10
python10
parse10
django10
security10
security-automation9
json9
owasp7
Programming languages (4)
Github contributions (5)
DefectDojo/django-DefectDojo
Mar 2019 - Apr 2019
DevSecOps, ASPM, Vulnerability Management. All on one platform.
Role in this project:
Backend Developer & Security Engineer
Backend Developer & Security EngineerContributions:18 commits, 6 PRs, 3 comments in 1 month
Contributions summary:Roy primarily contributed to the development of a Netsparker parser within the DefectDojo platform, enhancing its vulnerability management capabilities. They created and updated the parser to handle Netsparker scan results, integrating the parsing functionality with existing forms and import mechanisms. Additionally, they made adjustments to the codebase, including fixing import issues and ensuring correct severity mapping for Netsparker findings. The work also included updates to documentation and templates.
pythondjangovulnerability-managementbugbountydefectdojo
rasinfosec/scripts
Jul 2017 - Dec 2021
Contributions:26 commits, 25 pushes, 1 branch in 4 years 5 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.