David Hazar has been involved in information security since he began his career in 2000. In 2007, he took over the infrastructure and security teams for a business process-outsourcing firm in Utah to help them meet their own compliance requirements and contractual obligations and also those of their customers. This is where he began dedicating his time to security and has not looked back. David has worked in a wide variety of industries including government, healthcare, technology, banking, retail, and transportation. Over the last few years he has been focused on cloud security architecture, application security, and security training while working for the cloud services divisions within Aetna and Oracle. David also moonlights as an application security consultant-providing web and mobile application penetration testing.
David holds a master's degree from Brigham Young University and the following certifications: CISSP, GCIH, GWAPT, GMOB, GCIA, GCUX, Certified FAIR Risk Analyst, ITIL v3 Foundation and the Microsoft Certified Database Administrator - MCDBA
Being a SANS instructor is a great fit for David as he has provided focused, hands-on security and security tools training for over 300 developers and QA engineers over the past few years both in his current role at Oracle and in his previous role at Aetna. David says the favorite part of his job is helping people understand issues and the risk they present to the organization so they can make thoughtful and informed risk-based decisions.
In addition to working and teaching, David is currently working with Frank Kim on a Cloud Application Security course for SANS.
In David's free time, he enjoys reading; his favorite author is Brandon Sanderson. The rest of his free time is spent hanging out with his wife and four kids.