Over his 12 years as a security practitioner, David has explored many aspects of cyber security, from penetration testing and offensive security to GRC and architecture. The constant challenge of balancing customer risk with appropriate and effective controls keeps him coming back for more.  On occasion, he also still finds great joy in dusting off the offensive tools and breaking stuff.  When he isn’t at a keyboard David enjoys amateur powerlifting and spending time with his 1-year-old daughter.