Jan Nunez and Jay Smith are security researchers for a Fortune 100 company where they are primarily responsible for application security across web applications, thick clients, web services, and mainframe systems. Their research into CICS has uncovered several vulnerabilities on applications long thought to be secure which has allowed them to improve both SAST and DAST processes as well as develop testing methodologies for these systems that can be applied to all CICS applications.