David Young

Managing Senior Consultant

About David

David Young has worked in the I.T. industry for over 30 years, with the last 16 focused specifically on cybersecurity. Over the course of his career, he has supported organizations across a wide range of sectors, including healthcare, government, financial services, utilities, and consulting. This has given him a broad perspective on the security challenges different industries face. Today he works as a penetration tester and security consultant, where his work spans network, web application, mobile, and Active Directory assessments. 

What drives David is helping organizations find and resolve their security issues before someone else does. He takes particular satisfaction in translating complex technical findings into clear, actionable guidance that both engineers and executives can act on. David is a U.S. Army veteran who served in Operations Desert Shield and Desert Storm. That early experience instilled a discipline and mission focus that continues to shape how he approaches his work today.

Upcoming Conferences

NOV

13

Queen City Conference
Cincinnati, OH

Slides and Materials

Back to the Future-Proof
Preparing Now for Quantum Decryption Threats

It’s a Dangerous Business
A Fellowship Approach to Cybersecurity

Ship of Theseus as a Service
Security Testing When Nothing Is Truly Yours

Raiders of the Lost Architecture
Security Testing in Modern Applications

Garbage In, Garbage Owned
Offensive Testing Strategies for AI Systems

Posts by David

Password Vampires: Don't Get Bitten Twice

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that...

Don’t Get Tricked: How to Spot Phishing Before You Take the Bait

Don’t Get Tricked: How to Spot Phishing Before You Take the Bait

October means Fall, arguably the best season of the year, because it means cooler weather, scary movies, Halloween, and more than a few tricks and...

External Pentest

How to Prepare for Your External Pentest

Scheduling a penetration test means you are not waiting around for a breach to tell you where security gaps might exist within your environment. However,...

Maker Faire: Results, Reactions & What’s Next (AI Pit Droid pt. 4)

Maker Faire: Results, Reactions & What’s Next (AI Pit Droid pt. 4)

Three days at Orlando Maker Faire with an AI-powered Star Wars Pit Droid. What worked, what failed, and how the project evolves with Claude and...
Building a Dedicated Web App & API Pentesting Lab

Building a Dedicated Web App & API Pentesting Lab

Learn how to build a dedicated web app and API pentesting lab using Docker, explore various vulnerable applications, and enhance your penetration testing skills....
Rolling for Resilience Part 6 Loot Drops & Learning Points: Measuring What Matters

Rolling for Resilience Part 6 – Loot Drops & Learning Points: Measuring What Matters

Explore the importance of role-based paths in cybersecurity incident response training, enhancing engagement and realism in tabletop exercises....

Message David

Have a question about an engagement, a conference talk, or just want to say hello?
This goes directly to David, not a general inbox.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.