Tanya Janca

IANS Faculty

Tanya Janca, aka SheHacksPurple, is the best-selling author of 'Alice and Bob Learn Secure Coding', 'Alice and Bob Learn Application Security’ and ‘Cards Against AppSec'. Over her 28-year IT career she has won countless awards (including OWASP Lifetime Distinguished Member and Hacker of the Year), spoken all over the planet, and is a prolific blogger. Tanya has trained thousands of software developers and IT security professionals, via her online academies (We Hack Purple and Semgrep Academy), and her live training programs. Having performed counter-terrorism, led security for the 52nd Canadian general election, developed or secured countless applications, Tanya Janca is widely considered an international authority on the security of software.

Achievements & Noteworthy Contributions

• Founder: We Hack Purple (Academy, Community and Podcast), WoSEC International (Women of Security), OWASP DevSlop, #CyberMentoringMonday
• Best-Selling Author of Alice and Bob Learn Application Security
• CISO for 2015 Canadian General Election
• 13.5 years’ service to the Canadian Public (Government), 25 years in tech
• Numerous awards: Public Speaking, Security Leadership, Mentoring Leader, Hacker of the Year, DevSecOps Inspiring Individual, etc. from various organizations
• Spoken and keynoted at security conferences, meetups, and training events the world over
• Authored 'Alice and Bob Learn Secure Coding', 'Alice and Bob Learn Application Security’ and ‘Cards Against AppSec'

Hobbies & Fun Facts

Tanya is also an avid gardener with a small hobby-farm and will sing karaoke any chance she gets.

Wolfgang Goerlich

IANS Faculty

J. Wolfgang Goerlich is a CISO in the public sector. Prior to this role, he led IT and IT security in the healthcare, financial services, and tech verticals. Wolfgang has held senior positions at several consulting firms, leading security advisory and assessment practices. He is a strong presence in the security community, contributing to the establishment and organization of multiple groups and events. Wolfgang focuses on strategy, governance, identity and access management, and resilience.

Achievements & Noteworthy Contributions

• InfoWorld Leadership for DevOps and Cloud
• IDG Best Practices in Infrastructure Management
• Microsoft Most Valuable Professional (MVP) for Enterprise Security
• Contributed to NIST standards for digital identity (SP 800-63) and zero trust (SP 800-207)
• Former organizer of annual BSides and Converge conferences in Detroit

Certifications & Credentials

• CISSP - (ISC)2
• Certified Information Systems Auditor (CISA) - ISACA

Jake Williams

IANS Faculty

Jake Williams (aka MalwareJake) is a seasoned security researcher with decades of experience in technology and security. Jake is a former startup founder, former senior SANS instructor and course author, and an intelligence community and military veteran. He loves forensics, incident response, cyber threat intelligence and offensive methodologies. Today, Jake is an IANS faculty member, an independent security consultant, and is performing security-focused research to benefit the broader community. He has had the honor of twice winning the DoD Cyber Crime Center (DC3) annual digital forensics challenge. You may also know Jake from one of his many conference talks, webcasts, media appearances or his postings about cybersecurity.

Achievements & Noteworthy Contributions

• Two-Time Winner of the Annual DC3 Forensics Challenge
• Speaker at information security conferences such as Black Hat, DEF CON, ShmooCon, RSA, and DC3
• Designated a Master Computer Network Exploitation (CNE) Operator by the NSA
• Former Vulnerability Analyst at US Department of Defense
• Former Senior Systems Engineer at Dell Services

Certifications & Credentials

• MSIA, Information Assurance –Capitol College
• GSE, GSNA, GCFE, GREM, GCWN, GCIA, GCIH, GPEN, GCFA, GXPN, GSEC –GIAC

Mike Rothman

IANS Faculty

Mike is the Chief Strategy Officer and GM of Techstrong. Formerly Mike served as President of Securosis, an information security research and advisory firm, as well as Co-Founder and President of DisruptOps, a cloud detection and response company. His breadth of experience in the information security space and bold perspectives are invaluable as companies determine effective strategies to grapple with the dynamic security threatscape. Mike started practicing and advising on security topics over 25 years ago, and he’s been trying to get out of the business ever since…to no avail.

Achievements & Noteworthy Contributions

• Author of The Pragmatic CSO, which details how technical security practitioners can thrive as a CISO
• Spearheaded META Group’s initial foray into information security research
• Founded and acted as President of Security Incite, an information security analyst firm
• Founded SHYM Technology, a pioneer in the PKI software market
• Held Marketing and Strategy positions at CipherTrust, TruSecure, and eIQ Networks

Certifications & Credentials

• BS, Operations Research and Industrial Engineering – Cornell University

Hobbies & Fun Facts

Mike has been to 23 of the past 24 RSA Conferences. Of the 1000+ talks Mike has given over the years, he is most proud of the mindfulness talk he gave at RSA in 2014 (Google "Rothman RSA Neurohacking”).

Dave Kennedy

IANS Faculty

Dave is the Founder and Owner of TrustedSec, an information security consulting firm, and Binary Defense, a Managed Security Service Provider (MSSP) that detects attackers early to prevent large-scale invasions. In addition to creating several widely popular open-source tools, including 'The Social-Engineer Toolkit' (SET), PenTesters Framework (PTF), and Artillery. David has also released security advisories, including zero-days, with a focus on security research.

Prior to his work in the private sector, Dave served in the United States Marine Corps (USMC), focusing on cyber warfare and forensics analysis activities, including two tours to Iraq. He also served on the board of directors for (ISC)2, which is one of the largest security collectives and offers certifications such as the CISSP.

Achievements & Noteworthy Contributions

• Founding Member of the Penetration Testing Execution Standard (PTES)
• Co-Author of Metasploit: The Penetration Testers Guide (2011)
• Guest appearances on Fox News, CNN, CNBC, MSNBC, Huffington Post, Bloomberg, BBC, and other high-profile media outlets
• Presenter at information security conferences such as Black Hat, RSA, DEF CON, ShmooCon, INFOSEC World, ISACA, ISSA, United Security Summit, INFOSEC Summit, Hack3rCon, BSides, and DerbyCon, which he co-created and expanded into DerbyCon Communities

Certifications & Credentials

• BA, Business Management – Malone University
• CISSP – (ISC)2
• Qualified Security Assessor (QSA) – PCI Security Standards Council
• ISO/IEC 27001 Certified – ISO
• GSEC - GIAC
• Certificate Professional (OSCP) & Certified Expert (OSCE) – Offensive Security
• Global Information Assurance Gold Certification
• Microsoft Certified Solutions Expert (MCSE) – Microsoft