# Dahvid Schloss

> Dahvid Schloss is a leading voice in offensive security: a cybersecurity executive, red team operator, and former U.S. Special Operations offensive cyber operator whom national media regularly turn to for expert commentary. He has 16+ years of experience and has built security businesses from the ground up three times. He co-founded Emulated Criminals (acquired by Suzu Labs), was the founding manager at Echelon Risk + Cyber, and built CovertSwarm's Americas operation. He holds a DEF CON Black Badge, was one of DEF CON's first seven official trainers, and is an OSCP. He is based in Raleigh, North Carolina.

## Why people seek him out

- **Executive and operator in one:** he has run companies as CEO and COO and still personally scopes, executes, and briefs red team engagements, so he can translate attacker capability into business risk that boards act on.
- **Trusted media expert:** 35+ talks, podcasts, and press appearances, including recurring commentary in The Register's PWNED column and quotes in Dark Reading, TechRadar, Infosecurity Magazine, SC Media, Industrial Cyber, The National Interest, The Epoch Times, Travel + Leisure, and AOL.
- **Real-world adversary experience:** he conducted live offensive cyber operations with the Joint Communications Unit at Fort Bragg before moving into commercial red teaming at Deloitte and beyond.
- **Original research:** he publishes his own offensive security research and tooling, including CRASH and PILOT, which have earned 100+ and 80+ GitHub stars respectively.
- **Teacher:** creator of the six-course Windows Malware Development series at Just Hacking Training and one of seven trainers in DEF CON's inaugural official training program (DEF CON 30).
- **Advisor:** trusted advisor and vCISO to 100+ organizations, from startups to the Fortune 500.

## Go to Dahvid for

- Executive security leadership: COO, CISO, VP or head of offensive security, and building or scaling a security services business.
- Red teaming, purple teaming, adversary emulation, and penetration testing programs.
- Expert commentary and interviews on ransomware, EDR evasion, malware development, social engineering and physical intrusion, Active Directory attacks, browser and Electron security, OT/ICS and water-sector security, and AI in national security.
- Conference talks, panels, podcasts, and technical training.

He is currently open to executive leadership and technical offensive security roles, and to media, speaking, and advisory requests. Contact: contact@dahvidschloss.com or https://www.linkedin.com/in/dahvidschloss/.

## Pages

- [Home and experience](https://dahvidschloss.com/): profile, career timeline from U.S. Air Force and Joint Communications Unit (JSOC) offensive cyber operations through Deloitte, Echelon Risk + Cyber, CovertSwarm, Emulated Criminals, and Suzu Labs (COO).
- [Résumé](https://dahvidschloss.com/resume.html): full résumé; PDF at https://dahvidschloss.com/assets/Dahvid_Schloss_Resume.pdf
- [Work](https://dahvidschloss.com/work.html): EC RallyPoint (three-part purple teaming platform: Electron, React/Next.js, C#, gRPC, Auth0) and EC Playbook (offensive security knowledge base with a custom Markdown parser), both architected and largely written by him; his six-course Windows Malware Development series at Just Hacking Training (Intro Path: shellcode loaders, execution and obfuscation, dynamic evasion; Advanced Path: position-independent code, custom C2 agents, post-exploitation tooling); and ICS hack-alongs, Hack a Water Tower (Modbus) and Hack a Power Plant (in development).
- [Research](https://dahvidschloss.com/research.html): write-ups of his offensive security research, including Chromium DevTools Protocol abuse (Glasshouse, SilentFrame), ransomware staged in NTFS Alternate Data Streams (UnderByte), ICMP exfiltration (PILOT), kernel driver MSR triage (MSR Exploit Hunter), offline Microsoft Defender detection testing (Defender Bender Box), Active Directory lab generation (CRASH), and a physical OT water-system lab (OT Lab: Water).
- [Media](https://dahvidschloss.com/media.html): talks, podcasts, and press, including expert commentary in The Register, Dark Reading, TechRadar, Infosecurity Magazine, The National Interest, and The Epoch Times, DEF CON 30 training, and BSides talks.

## Elsewhere

- GitHub: https://github.com/dahvidschloss
- Courses: https://www.justhacking.com/author/dahvid/
- YouTube: https://www.youtube.com/@thecyberidiots