Dave Spencer

WORK HISTORY

EDUCATION

SKILLS

ABOUT DAVE SPENCER

Dave is an accomplished cybersecurity professional with over two decades of experience in penetration testing, attack simulation, and cyber range exercising. Starting his cyber security career in 2003 with the UK Ministry of Defence, he quickly built a strong foundation in both offensive and defensive security operations. At NGSSoftware (acquired by NCC Group), he expanded his expertise across physical and cyber domains, pioneering methodologies that blended real-world adversarial tactics with technical exploit development.Throughout his career, Dave has led the design and delivery of cutting-edge attack simulation capabilities helping organisations understand, test, and improve their resilience to evolving threats. His experience spans hands-on offensive operations, red team leadership, and building simulation functions that mirror the tactics, techniques, and procedures (TTPs) of sophisticated adversaries.Since joining Immersive in 2023, Dave has played a key role in redefining how cyber exercising is delivered at scale. Over the past two years, he redesigned Immersive’s exercising model from the ground up, culminating in the creation of a new service line: Dynamic Threat Ranges. This initiative represented a complete rewrite of the existing Cyber Range Exercising platform introducing Infrastructure as Code-driven range generation, dynamic tooling deployment, and live attack orchestration. The result: highly realistic, adaptable, and automated training environments that better reflect modern adversary behaviour.Dave’s leadership style blends consultative guidance with empowerment. He creates collaborative, innovative environments where technical teams can thrive, experiment, and deliver world-class capabilities. He’s also a passionate mentor, committed to developing the next generation of cybersecurity professionals through guidance, education, and community engagement.A regular speaker at industry conferences, Dave shares insights on attack simulation, threat intelligence, and cyber resilience. His career is driven by a single goal: to continually advance the realism and effectiveness of how organisations prepare for cyber threats through innovation, leadership, and a relentless focus on operational excellence.