EXECUTIVE. OPERATOR. BUILDER.
Leadership mindset.
Operator instincts.
I build security teams, turn cyber risk into business decisions, and write the tools that put defenses to the test.
APT Big Daddy_
EmulatedThe best security leaders understand what happens on both sides of the screen.
My career started in military communications and special operations, then moved into offensive cyber operations, red teaming, and building security businesses. I’ve built security businesses from zero three times, and it’s worked every time: as founding manager I helped scale Echelon Risk + Cyber from 3 to 40 people, I stood up CovertSwarm’s Americas operation and grew U.S. revenue 300%, and I co-founded Emulated Criminals and took it through acquisition. Along the way I’ve built service lines that were profitable in year one and led teams across four countries.
I stay hands-on by design. Whether I’m building a purple teaming platform, researching an attack technique, or teaching malware development, the goal is the same: connect technical depth to decisions that actually matter.
People first. Real-world perspective. A builder’s curiosity.
Created and delivered the six-part Windows Malware Development course series: shellcode loaders, advanced execution and obfuscation, dynamic evasion, position-independent code, C2 development, and post-exploitation tooling.
Led the integration of Emulated Criminals following its acquisition, bringing together intellectual property, service lines, and delivery operations.
Grew a red team tooling shop into a multi-state Red-Team-as-a-Service firm, through to acquisition.
Established the Americas operation for a UK-based security firm, helping grow U.S. revenue by 300%.
Founding manager who helped scale the firm from 3 to 40 employees in under two years.
Technical manager for an eight-person team delivering managed penetration testing, red teaming, and purple teaming.
Progressed from enterprise systems administration to special operations communications and offensive cyber research.
Platforms, research, and tools.
From the architecture to the code.
A three-part purple teaming platform that brings operators, engagement data, and client visibility into one system.
I designed the architecture and wrote nearly all of the platform, connecting campaign operations, asset tracking, observations, and threat intelligence.
Explore the interface
Field knowledge, made useful. A custom Markdown parser turns offensive security notes into searchable, structured reference sheets.
I built support for metadata, card layouts, keyboard shortcuts, code blocks, and custom syntax highlighting, so contributors can focus on the knowledge instead of the presentation.
Explore the interface
Post-exploitation research into the Chrome DevTools Protocol across Chromium browsers and Electron applications.
ACTIVE DIRECTORY LABSCompletely Risky Active-Directory Simulation Hub. A lab project for practicing and exploring Active Directory security.
PROTOCOL RESEARCHPing-based Information Lookup and Outbound Transfer. Exploring ICMP as a channel for information exchange.
SECURITY TOOLINGA containerized Windows Defender engine for running local malware scans and inspecting the results.
OPERATIONAL TECHNOLOGYThe components behind a water-system lab, bringing industrial control system concepts into hands-on learning.
BROWSER SECURITYA proof of concept exploring post-exploitation credential collection through Chromium browsers.
One of DEF CON’s first seven official trainers. Black Badge holder. Still happiest making something difficult click for someone else.
Explore my Just Hacking courses ↗Also: Hack a Water Tower & the free Shellcode Upskill Challenge.
Conversations, reporting, and lessons
from the field.
Original appearances and reporting, with syndicated editions linked where available.
LET’S BUILD WHAT’S NEXT
I’m interested in executive leadership and technical offensive security roles where I can build strong teams, meaningful capabilities, and things that work.
dahvidschloss@gmail.comBASED IN RALEIGH, NORTH CAROLINA
