The riffraff of the web application security space Jeremiah Grossman has polled a bunch of
application security professionals and published the results on his site.
"Two weeks ago I sent out an informal email survey to several dozen
people I know in the web application security professional services
business. People from large and small organizations who regularly
perform penetration tests, vulnerability assessments, train others in
secure software development, write articles and whitepapers, release
tools, etc. In short, the “experts”. The questions were intended to
shed more light on the industry from those who live and breathe
webappsec every day. Of the pool of 40, I received 21 responses, and
the results are interesting. The data set is small, so be careful
reading too deeply into the results."
Article Link: http://jeremiahgrossman.blogspot.com/2006/10/web-application-security-professionals.html