# Derek Fisher

> Derek Fisher is a cybersecurity leader, award-winning author, and university instructor who has spent nearly three decades bridging the worlds of hardware engineering, software development, and application security. As VP of Application Security at Envestnet, he leads product security for a global fintech firm. He wrote the 'Application Security Program Handbook' (Manning Publishing), authored the 'Alicia Connected' children's book series on digital safety, teaches application security at Temple University, and runs the Securely Built newsletter - making complex security concepts accessible to engineers and leaders alike.

- **Role:** VP of Application Security at Envestnet
- **Organizations:** Envestnet, Temple University, Securely Built
- **Nationality:** American
- **Education:** Bachelor's in Computer Science, Unknown, Master's in Cybersecurity, Boston University
- **Known for:** Author of 'Application Security Program Handbook' (Manning Publishing, 2022) - foreword by Matt Rose, Chief Architect at Bionic, Award-winning author in the cybersecurity education space, Author of 'Alicia Connected' 3-book children's series on safe tech use

## Career timeline

- **early career** — Worked in hardware engineering, designing circuits for commercial and military applications
- **mid career** — Transitioned to software development after earning a Computer Science degree
- **~2017+** — Moved into cybersecurity after being inspired by a product security officer at Siemens; pursued graduate degree in cybersecurity at Boston University
- **2020** — Published 'Alicia Connected' children's book series on safe technology use
- **2022** — Published 'Application Security Program Handbook' with Manning Publishing
- **ongoing** — Serving as VP of Application Security at Envestnet, a global financial technology company
- **ongoing** — Teaching application security at Temple University as a professor for undergraduate and graduate CS students
- **ongoing** — Running the 'Securely Built' newsletter and Substack on application and product security
- **ongoing** — Teaching courses on Udemy including 'Building an Application Security Program from Scratch'

## Achievements

- Author of 'Application Security Program Handbook' (Manning Publishing, 2022) - foreword by Matt Rose, Chief Architect at Bionic
- Award-winning author in the cybersecurity education space
- Author of 'Alicia Connected' 3-book children's series on safe tech use
- Professor at Temple University teaching application security (undergrad and grad)
- Advisor to Temple University CyberDIA PSM program
- Published Udemy course: 'Building an Application Security Program from Scratch'
- CISSP (Certified Information Systems Security Professional) certified
- CSSLP (Certified Secure Software Lifecycle Professional) certified
- Speaker at ISC2 events and cybersecurity conferences
- Runs the Securely Built newsletter and Substack with hundreds of subscribers
- Built and matured security teams in healthcare and financial technology sectors
- Nearly 30 years of combined engineering and security experience

## Latest updates

- **2026-04** — Actively publishing on the Securely Built Substack, including coverage of API key/token theft via prompt injection in GitHub Actions
- **2025** — Appeared on multiple podcasts including NetSPI, Tech Lead Journal, and Phoenix Security discussing product security strategy and AI in cybersecurity
- **2025** — Continuing to teach application security at Temple University and advise the CyberDIA PSM program

## Links

- Website: https://securelybuilt.com
- LinkedIn: https://www.linkedin.com/in/derek-fisher-sec-arch
- YouTube: https://www.youtube.com/@securelybuilt

---

Profile page: https://yespress.io/derek-fisher
Published by YesPress — https://yespress.io
Last updated: 2026-04-21