Profile
Dave is the founder and principal consultant with Voodoo Security, an information security consulting firm with broad expertise. He is also a senior instructor, analyst and course author for the SANS Institute and a VMware vExpert with extensive experience designing and configuring secure virtualized infrastructures. In addition, Dave has served as co-chair of the Cloud Security Alliance (CSA) Top Threats Working Group and founded the CSA Atlanta Chapter. Dave has consulted with hundreds of organizations in the areas of security, regulatory compliance, network architecture and engineering. He has also worked as a security architect, analyst and manager for several Fortune 500 companies.
Expertise
- Cloud Security
- Virtualization and Container Security
- Network Architecture and Security Monitoring
- Security Operations
- Event Log Management and Monitoring
Qualifications
Achievements & Contributions
- Former CSO for Configuresoft
- Former CTO for the Center for Internet Security
- Speaker at information security conferences such as RSA, DEF CON, and BSides
- Author of Virtualization Security: Protecting Virtualized Environments (2012)
Certifications & Credentials
- MBA – Georgia State University
- BS, Computer Information Systems – Kennesaw State University
- BS, Psychology & Microbiology – Georgia State University
- CISSP – (ISC)2
Upcoming Events
View More
January 15 2025
2025 January Webinar: Infosec Trends to Watch in 2025
The past 12 months saw infosec teams manage through disruption, mature long-term initiatives and make in-roads on new efforts. IANS Faculty Dave Shackleford led sessions to support CISOs and their teams with that work. In this webinar, he’ll dive into his favorite sessions from the past year to call out the top takeaways and provide a look forward on what to do next to improve your security program in 2025.
February 06 2025
2025 Q1 Symposium: Get Serious About Resilience: Lessons for a Post-CrowdStrike World
The CrowdStrike outage was a wake-up call – we’ve been neglecting the “availability” part of the CIA triad for too long. As security supply chains become more complex and inter-dependencies grow, modernizing your resilience capabilities is essential.