RVAsec 15

After a career in industrial controls (Honeywell) and another in fin tech (Capital One), I left corporate America to focus on community impact more than income, and founded IT4Causes, a nonprofit that helps other nonprofits with their technology challenges.  We're now entering our 10th year of serving nonprofits with segment-specific technology solutions, using a mix of paid nonprofit tech experts, skilled IT volunteers, and technology interns.

Security is obviously a huge part of what we do to ensure our for-purpose clients are protected from growing cyber threats. As all of our clients are ... Read more

EMbeded software developer- C, assembler (mips)
AWS Admin
RH/Centos Admin
SQL developer, dbadmin (MySQL)
PHP, bash/tcsh

mobile device security
RMF lifecycle artifact management
Data Governance
Good places to fish
Incident Reporting

I enjoy golf and photography and duck hunting and traveling out West. I’m also a proud Dad and husband who believes in Family First. Grateful that our son played football at UVa for 5 years and was deeply involved with the ACC as a Student Athlete Chairman. He also just received his Masters. Great experience for our entire family and friends. Also enjoy SEC football as a UGa alum and love Athens Ga for its vibe and music. Our youngest son has a band and will be enjoying his second year at JMU. They will be traveling to UNC and South Carolina for gigs this Fall. I will be a roadie! Love it. He... Read more

Very interested in the theory of LLMs and integrating them into the software development workflow.

Rob has over 11 years of experience covering all facets of information security. He has been behind the lines helping to design, build, and defend the US Marine Corps, US Senate, and Pentagon networks - as well as performing penetration tests and Red Team assessments against those same networks. More recently, Rob has performed numerous successful Red Team assessments against commercial Fortune 50 companies representing some of the best defensive teams in the industry.

Rob’s experience and expertise ranges from embedded and wireless devices in industrial control system networks to standard ...

Read more

Chris Gates is a graduate of the United States Military Academy and Army Veteran. He is a well-known Information Security professional and has spoken at over 50 security conferences around the world. He is also a spiritual fitness coach and energy healer.

“Hey I’m Chris. I’m a spiritual fitness coach, energy healer, hacker & recovering angry and depressed guy. I assist people on their healing journey by guiding them to begin to or improve loving themselves, connect with their inner child, and identify their life purpose through energy healing, coaching, education and being an accountabili... Read more

Barry Kouns is Managing Director and principal consultant for Information Security Program services at SQM Advisors LLC, an information security, quality and management consultancy. Barry's experience includes information security consulting, risk assessment and quality management. Barry can assist your organization with:

• Exploring various business formations;
• Understanding your value proposition;
• Developing strategies and plans, formulating business goals, and establishing a realistic budget;
• Financial modeling, identifying potential sources of funding, and analyzing market competition and target...

Read more

Kim Mahan is the Founding Apprentice at MAXX Potential, a technology consulting firm whose "earn-while-you-learn" model has produced hundreds of engineers‚ including cybersecurity professionals now at Capital One, AWS, Google and beyond. A CISSP and Six Sigma Black Belt with 20+ years in enterprise technology leadership at GE and Genworth Financial, Kim specializes in hacking the human element.

She is a contributing author of Lead With Empathy (with Chris Voss), where she coined "Operational Empathy"‚ the tactical art of building systems around what people actually need to succeed, rather than what credentialing systems say they should know. Her current work, Human Amplified, applies neuroscience to the "Information Diet," framing passive consumption as a primary driver of cognitive atrophy and a critical vulnerability in the modern workforce. Previously named an "Innovator Changing the South" by Fast Company and Entrepreneur of the Year by NAWBO... Read more

Jeff is a respected Information Security advocate, advisor, hacker, evangelist, mentor, teacher, international keynoter, speaker, former host of Security & Compliance Weekly, co-host on Paul's Security Weekly, Tribe of Hackers (TOH) contributor, including Red Team, Security Leaders, and Blue Team editions, and a member of the Cabal of the Curmudgeons. Jeff currently serves as a PCI QSA and Trusted Advisor for Online Business Systems, also a Grant Advisory Board Member for the Gula Tech Foundation, Advisory Board Member for the Technology Advancement Center (TAC), and is the Director of Diversity... Read more

Brian Markham is an executive, advisor, hacker, and mentor with over 25 years of experience in IT and cybersecurity. Brian currently serves as the Chief Information Security Officer for EAB Global, a leading provider of software, marketing, and research services to institutions of higher education. Prior to joining EAB, he was a consultant at KPMG and PwC, and was on the security teams at the University of Maryland and George Washington University.

Employee engagement is an area I am passionate about. 

Victoria Mosby is a cybersecurity strategist, advisor, and storyteller with 16 years of experience spanning federal consulting, governance and risk, and cybersecurity SaaS. She is the founder of Basilisk Security Consulting, a boutique advisory practice focused on security communication and executive alignment, and the creator of the Cyber Lorekeeper, a platform dedicated to making security concepts not just understandable but memorable.

Her work sits at the intersection of technical depth and business translation. As a Senior Sales Engineer at PlexTrac, Victoria partners with security teams to... Read more

Cybersecurity professional, runner, writer, and huge fan of sci-fi and fantasy.

David Reign is a Security Analyst at Oracle with seven years of experience in information security, including three years supporting enterprise environments at scale. His work focuses on cloud security, virtualization, and strengthening security posture through practical risk management and control implementation. David holds a B.S. in Mathematics from Hampton University and an M.Eng. in Cybersecurity from the University of Maryland. He also maintains industry certifications including CompTIA Security+, CompTIA PenTest+, and GIAC Cloud Security Essentials (GCLD).

Hi, I’m Will—online I usually go by Willywillwill. It’s a bit silly, but it fits me well (plus, I’m a 3rd (William R. Roe III), so it kind of works). I’m into all things tech and dabble in programming. I’ve worked with C, C++, and Python in school, but these days I mostly stick to Python and Bash. I’ve recently started exploring PowerShell.

Outside of tech, I enjoy practicing Japanese, juggling, and joking around (gotta keep the “J” theme going). I also run a local meetup group called RVA Cybersecurity, where I connect with fellow tech enthusiasts and help grow the community.

...

With 20+ years in cyber security, Jason Ross now performs adversarial testing and defense of deployed generative AI applications, agentic systems, and the LLMs powering them at Salesforce. Jason's work focuses on prompt injection attacks and defense, model governance and security, and agent exploitation on high-stakes, high-visibility production deployments. He is also a core contributor to the adversarial AI tooling and datasets used by engineering, AI research, and ethics teams across the company.

Outside Salesforce, Jason co-leads the OWASP GenAI Security Project Red Team Initiative and he... Read more

Michael Roytman is the CTO of Empirical Security. Previously, he was the Chief Data Scientist of Kenna Security, and a Distinguished Engineer at Cisco. He served on boards for the Society of Information Risk Analysts, Cryptomove, and Social Capital. He was the co-founder and executive chair of Dharma Platform (acquired, BAO Systems), for which he landed on the 2017 Forbes 30 Under 30 list. He currently serves on Forbes Technology Council.

Bhaumik Shah is a cybersecurity leader and founder of Securify, where he helps organizations secure their cloud, applications, and infrastructure through penetration testing, red team operations, and compliance programs like SOC 2 and ISO 27001. With over a decade of experience uncovering vulnerabilities in complex environments — from AWS misconfigurations to API flaws — he has worked with startups, enterprises, and government agencies to strengthen their security posture. Bhaumik is passionate about sharing real-world lessons from the field, mentoring the next generation of security...

Cybersecurity Made Human | Style, Empathy & Awareness in a Digital World | 💜🫶🏼

Offensive Security Services at CampusGuard. Star Wars, Hockey, Emo Music, Mental Health Awareness and Swahili enthusiast.

IT Governance Professional with an Application Management background. Currently managing the IT SOX Program, helping application teams understand controls, evidence collection and delivery, deficiency remediation, and internal and independent auditor relationships.

Jon Waldman is the Co-Founder and President of SBS CyberSecurity, where he oversees the SBS service teams and the SBS Institute. For more than 20 years, Jon has helped hundreds of organizations identify and understand cybersecurity risks to allow them to make better and more informed business decisions. Jon's passion for cybersecurity training and education led him to be a driving force in the development of the SBS Institute. Designed for the banking industry, the Institute provides specialized cybersecurity education and now offers more than 10 certification courses, with State Association partnerships... Read more

Aqeel Yaseen transitioned into Offensive Security from over a decade of teaching yoga and mentoring mindfulness based retreats professionally, and is currently working with RedHelm. That might seem like a curious combination, but Pentesting and teaching yoga both help people cultivate awareness of blind spots, and find ways to learn and grow from that awareness. Aqeel has been teaching himself the art and skill of hacking by creating home labs, owning machines on HTB and Offsec's Proving Grounds, and participating in CTFs. He has already earned the Security+, OSCP, OSWA, and CRTO certifications... Read more