Dave Shackleford

Dave Shackleford is the owner and principal consultant of Voodoo Security and faculty at IANS Research. He has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering, and is a VMware vExpert with extensive experience designing and configuring secure virtualized infrastructures. Dave is a SANS Analyst, serves on the Board of Directors at the SANS Technology Institute, and helps lead the Atlanta chapter of the Cloud Security Alliance.

More About Dave

Upcoming Courses


Dave previously worked as CSO for Configuresoft, CTO for the Center for Internet Security, and as a security architect, analyst, and manager for several Fortune 500 companies. With his previous emphasis in virtualization and converged infrastructure, Dave was thrown into the cloud space long before most thought it was going anywhere. Due to the constant changes within The Cloud, its new and interesting technologies, coupled with Dave’s propensity to get bored easily, this has been a great fit for his professional career.

With a history of building software-defined infrastructure since 2005, Dave enjoys teaching about cloud security. He was using AWS before it was a global cloud service provider giant and has been a part of the cloud security industry since it began. He has co-chaired working groups at the Cloud Security Alliance, started a CSA chapter in Atlanta, and been pushing the security industry forward into cloud, kicking and screaming, for as long as he can remember. Dave thoroughly enjoys sharing his extensive cloud experience with students so they can help their organizations architect security cloud environments from the start.

Dave’s journey with SANS began in 2002 with the GIAC GSEC certification, which led to grading GIAC Gold papers, writing GIAC exam questions, and eventually to writing and teaching short courses, then long. Cloud security is very dynamic, and those who cannot commit to constant change and learning struggle in the cloud arena. Dave’s approach to teaching is to emphasize the core techniques and a "how to keep up with this" approach that helps sustain students once the course is over and they are back in “the real world”.

In addition to authoring courseware, Dave is the author of the Sybex book Virtualization Security: Protecting Virtualized Environments, as well as the co-author of Hands-On Information Security Lab Manual Second Edition. Dave earned a BS in Computer Information Systems from Kennesaw State University and an MBA from Georgia State University. Over the years, he has earned numerous professional certifications including GIAC GSEC, GCIH, and GCIA. Dave is also a faculty member of the SANS Technology Institute, an NSA Center of Academic Excellence in Cyber Defense and multiple winner of the National Cyber League competition.

When his head is not in The Cloud, Dave is a musician, fitness enthusiast, and a bibliophile.

Listen to Dave's teaching in one of his many webcasts.



Dave is a frequent webcast presenter. To find more webcasts with Dave Shackleford, please visit the SANS Cloud Security YouTube Channel, SANS Webcast Archive, or Dave’s RSA Conference Expert page.


Dave has a significant number of papers in the SANS Reading Room, which requires a free membership in SANS.org community. If you are interested in reading these papers and thousands more, you can sign in or register here.