 He led the Secure Coding Initiative in the CERT Division’s Software Engineering Institute (SEI) in Pittsburgh, Pennsylvania until 1991.He also has worked at the X Consortium in Cambridge, Massachusetts, where he developed and maintained code for the Common Desktop Environment and the X Window System.He returned to SEI in 1996, working on component-based software engineering.