EXPERIENCE
David is a Security Consultant with 15+ years of experience in the technical industry. He specializes in Network Security and Penetration Testing, Vulnerability Assessments, Wireless Assessments, Physical Security Assessments, Firewall and Router Audits, Social Engineering, Regulatory Compliance, and Network/Systems Engineering. He has worked in various industries including consulting, education, military, retail, government, media, law firms, and hospitals. David started his career as a member of the United States Army and was deployed to Iraq as convoy and convoy security.
EDUCATION & CERTIFICATIONS
- B.AS in Network Security and Forensics, Fountainhead College of Technology
- Certified Information Systems Security Professional (CISSP)
- Offensive Security Certified Professional (OSCP)
- QSA
- C|EH, Security+
- Network+
- A+
- NSTISSI-4011
- CNSSI-4012
- CNSSI-4013
- CNSSI-4014
- NSTISSI-4015
- CNSSI-4016
PROFESSIONAL AFFILIATIONS
- East TN ISSA
- Knoxville InfraGard
- OWASP Knoxville
- DC865
PASSION FOR SECURITY
David’s passion for security stems from his desire to help others be more secure. David has always had an interest in making technology do what it wasn’t meant to do. His lifelong passion for security sparked after viewing different films such as Sneakers, Hackers, and WarGames at a young age.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Dameware Mini: The Sleeper Hit of 2019?
Discover how to exploit a 4-year-old vulnerability in SolarWinds Dameware Mini Remote Control, and gain footholds on several gigs, with step-by-step guidance…
NFT Crime: From the Simple to the Ingeniously Simple
Bored Ape Yacht Club NFT theft highlights the growing threat of cryptocurrency scams, including rug pulls, social engineering, and wash trading, posing risks…
Social Engineering Basics: How to Win Friends and Infiltrate Businesses
Understanding social engineering tactics and how to defend against physical breaches, with expert insights to enhance security awareness and employee…
Dungeons and Daemons
Play Roll for Initiative. Hack the Planet.Dungeons & Daemons is a cybersecurity RPG that drops you into the boots of a Red Team operator on a live…
You Had Us at the First Alert: A Guide to Finding Frequently Missed Detections
Join us for this webinar to get a clearer picture of where your detection coverage has blind spots and a practical roadmap for closing them before a real…
Benchmarking Self-Hosted LLMs for Offensive Security
We put LLMs to the test—let's find out how good AI is at hacking! We walk through six simple challenges with intentionally naïve setups to test how capable…
TrustedSec Livestream - AMA: Detection Engineering in 2026 and Beyond with John Dwyer
Come prepared with your questions and walk away with actionable knowledge to sharpen your detection capabilities.
IAM the Captain Now – Hijacking Azure Identity Access
I decided to spend some research time diving in depth into Identity and Access Management (IAM) within Microsoft Azure. I am going to show you within this blog…
Building a Detection Foundation: Part 5 - Correlation in Practice
From Data Sources to DetectionWe've covered a lot of ground in this series: Windows Security events for logon tracking and process execution; PowerShell…
Security Noise - A Goblin, a Ghost, and a Ninja Walk into the Azure Bar
On this episode, Geoff and Skyler are joined by NyxGeek to discuss his suite of Azure bypass techniques. Since these techniques leave no trace, what does it…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
