EXPERIENCE
Steve Maxwell has 25 years of technical experience ranging from software development to software quality, performance engineering, Information Security, and audit. Before TrustedSec, Steve performed a number of IT functions supporting security initiatives across multiple industries. He has presented to hundreds on topics of automation, performance engineering, and information security.
EDUCATION & CERTIFICATIONS
- Bachelor of Science, University of Utah
- Certified Information Systems Security Professional (CISSP)
- Qualified Security Assessor (QSA)
- Certified Information Systems Auditor (CISA)
- Certified Data Privacy Solutions Engineer (CDPSE)
- ISO 27001 Lead Auditor
- CMMC Registered Practitioner
PROFESSIONAL AFFILIATIONS
Information Systems Audit and Control Association (ISACA)
PASSION FOR SECURITY
Steve’s passion for security is in helping his clients to improve their security and in preparing them to be ‘the smartest in the room’.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Book Review - The Definitive Guide to PCI DSS Version 4
As a PCI QSA, I have answered numerous questions about the new PCI DSS Version 4. With over 500 total controls, and at least 100 of them unique to this…
Network Segmentation for the Rest of Us! How to get your segmentation project moving toward zero trust.
Implementing network segmentation can limit internal movement, improve access control, and slow down attacks, allowing for more time to react and reducing…
Strength Training With Transport Cryptology: Part 2
Review the latest PCI Security Standards Council (PCI-SSC) guidelines for evaluating application cipher suites and ensure compliance with version 4.0 standards…
Queen City Conference
TrustedSec is proud to sponsor and have a booth at this year's Queen City Conference!
WWL First News with Tommy Tucker - What are smart device security risks?
Hackers recently targeted fridges and freezers at grocery stores in Europe, which has people asking about the smart devices in their own homes. Advisory…
Leash Your LLM: Rolling Out Claude and Copilot Securely
Join our experts as they break down the essential security considerations for Claude Desktop and Microsoft Copilot and how to safely rollout desktop AI use in…
BSides Columbus 2026
Enroll in our pre-conference training and don't miss the keynote by Founder & CEO David Kennedy at BSides Columbus!
The Quiet Phase: Why Active Directory Group Enumeration Deserves Your Attention
Most teams watch the door; the window gets less attention. In this blog, we cover how auditing Active Directory group enumeration surfaces attacker…
News 5 Cleveland - Cleveland warns of scammers posing as city employees, demanding thousands
When a scam asks for far too much, that’s often how it gets caught. Advisory Solutions Director Alex Hamerstone joins News 5 Cleveland to discuss the City of…
Three Flags and a Funeral: Are CTFs Dead?
Is AI the end of CTFs, or just their next evolution? AI is making its way into every corner of technology and CTFs are no exception, but what does this mean…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
