Open to opportunities

Adam Wilson

@adamwilson

Message

Senior DevSecOps and application security leader driving engineering-first automation.

United States

Message

What I'm looking for

I am seeking a senior DevSecOps or AppSec leadership role where I can engineer developer-first security automation, scale secure SDLC practices, lead cross-functional teams, and deliver measurable cost and risk reductions.

I am a senior DevSecOps and application security leader with 15 years of experience building developer-centric, enterprise-grade automation and secure SDLC programs. I design policy-as-code solutions and engineer scalable workflows that reduce risk and optimize costs.

At R1 RCM I led international AppSec operations, implemented policy-as-code across 2.5K repositories with Python and GitHub Actions, and reduced security tooling spend by 24% YoY while scaling WAF coverage by 500%.

I combine hands-on offensive security and secure engineering experience—penetration testing, AST automation, cloud-native build systems, and published research in AI security—to help organizations shift security left and embed practical, measurable protections into developer workflows.

Experience

Work history, roles, and key accomplishments

Current

Sr. Manager, DevSecOps

Current

R1 RCM

Apr 2023 - Present (2 years 10 months)

Designed and implemented policy-as-code automation across 2.5K repositories and reduced security tooling spend by 24% YoY ($237,000) while scaling WAF protection 500% and leading international AppSec operations.

Python GitHub Actions Policy as Code DevSecOps WAF Cost Optimization AppSec Team Leadership

Offensive Security Engineer

Mile High Cyber

Oct 2021 - Feb 2024 (2 years 4 months)

Performed 20 web application and API penetration tests and delivered actionable client reports and engagement support for multiple U.S. organizations.

API Testing Burp suite ZAP Client Engagement

Sr. Application Security Architect

R1 RCM

Jul 2022 - Apr 2023 (9 months)

Conducted early SDLC API penetration testing, threat modeling, and DevSecOps architecture reviews while integrating and validating DAST/SCA tooling and supporting AST automation efforts.

Threat Modeling API Testing DAST SCA DevSecOps Python BASH Integration

Senior Software Engineer

VisitPay

Mar 2019 - Jun 2022 (3 years 3 months)

Designed and maintained healthcare payment solutions on a .NET/MSSQL stack and pioneered in-house manual and semi-automated app/API penetration testing to remediate SAST/DAST findings.

.NET MSSQL SAST DAST Burp suite API Security DevSecOps

Software Engineer

Global Learning Systems

Oct 2016 - Mar 2019 (2 years 5 months)

Built multi-tenant LMS web app features and APIs on Azure/.NET, implemented DevOps processes with Azure Resource Manager and PaaS, and created an internal Azure-based NuGet feed.