David Shaw

About David Shaw

David has extensive experience in many areas of information security and enterprise risk management.Beginning his career as a Network Security Analyst, David monitored perimeter firewalls and intrusion detection systems to identify and neutralize threats in real time.After moving to the world of penetration testing, David led the security assessment and software development teams at Redspin as its CTO & VP of Professional Services through the company\'s acquisition in 2015.From 2015 until 2025, David was AppFolio\'s Chief Information Security Officer, serving as a trusted advisor on technical risk.David is currently AppFolio\'s Senior Vice President, Trust, and the Chief Risk & Security Officer for the business.David has particular interests in complex threat modeling and unconventional attack vectors, and has presented research at ToorCon, LayerOne, DEF CON, NolaCon, THOTCON, BSides Las Vegas, BSides Los Angeles, and BSides Seattle.

Experience

1. SVP, Trust Chief Risk & Security Officer

   AppFolio

   Mar 2026 — Present · Santa Barbara, CA, US

   Leader in AppFolio\'s Trust organization with direct oversight of information security, enterprise risk management, technology compliance, and IT departments.Highly technical executive responsible for application security, infrastructure security, security operations, security software engineering, vulnerability management, and ATO detection, prevention, and response teams.Proven success building and scaling high-performing programs, personnel, and technical capabilities that protect AppFolio\'s customers, products, systems, and data while enabling the business to operate safely at speed.

Skills

• Vulnerability Management
• Intrusion Detection
• Nmap
• Firewalls
• Linux
• Pci Dss
• Cloud Security
• Security Research
• Vulnerability Scanning
• Web Application Security
• Computer Forensics
• Vulnerability Assessment
• Network Security
• Owasp
• Application Security
• Penetration Testing
• Computer Security
• Hipaa
• Fuzzing
• Information Security Management
• Security
• Unix
• Information Security
• Internet Security