Bio

My early career was focused around System Administration (Linux and Unix) with an emphasis on web technologies such as web servers, FTP servers, application servers, and databases. That said, Information Security has always been my passion and in early 2010 National Instruments finally gave me the opportunity to become the Information Security Program Owner. Today, I continue to run their security program handling everything from compliance to enterprise risk management to vulnerability management and more; none of which existed prior to me starting the program. I have instructed many different trainings internally and have presented externally at a large number of conferences including BlackHat, BSides Las Vegas, OWASP AppSecUSA, MISTI InfoSecWorld, HouSecCon, and TRISC as meetings for OWASP, ISSA, and SPIN. I have a BS in CS, but I enjoy breaking web applications much more than I ever enjoyed developing them. Specialties: linux, unix, apache, mysql, oracle application server, tomcat, websphere, weblogic, bea, ibm, web application security, proxies, tokenization, metasploit, vulnerability management, enterprise risk management, compliance (sox & pci), and much more!