I have "officially" worked in Information Security since 2003, in everything from start-ups to government organizations to finance. I am an Information Security Officer at a financial company and read a lot of source code.