The article gives lots of info about how to get better at security review to be sure, but I'd really like to hear some examples from someone who has played this role before. How do you go around evaluating the security of a hunk of code, specifically? Have you caught a vulnerability during the review process? What'd it look like?
That would be a great companion post, the process this one describes doesn't include code review per se.