Eric Johnson is a Principal Instructor with the SANS Institute where he authors information security courses on cloud security, DevSecOps automation, secure coding and defending mobile apps. He delivers security training for SANS around the world and presents security research at conferences including SANS, BlackHat, OWASP, BSides, DevOpsDays and ISSA. Johnson is also a co-founder and Principal Security Engineer at Puma Security, focusing on cloud security, static code analysis and DevSecOps automation. His experience includes performing cloud security reviews, infrastructure as code automation, application security automation, web and mobile application penetration testing, secure development lifecycle consulting and secure code review assessments.