Tom Eston

About Tom Eston

I’m an accomplished cybersecurity leader known for bridging technical expertise with business execution, leadership, and the ability to build and scale high-performing teams. My background spans cybersecurity strategy, professional services, and go-to-market execution, with a proven track record of designing, launching, and operating Professional Services organizations that deliver measurable customer value and support business growth.I bring extensive experience building Professional Services teams from the ground up defining service offerings, establishing delivery models and operational processes, aligning services with sales and product teams, and scaling teams while maintaining quality, consistency, and customer trust. My focus has always been on creating services organizations that are both technically excellent and commercially successful.I’m also a recognized voice in the cybersecurity community, serving as an IANS Faculty Member and having spoken at industry-leading events including SANS, OWASP AppSec, ShmooCon, DEF CON, Black Hat USA, and international conferences. I’m the founder and host of the Shared Security Podcast and a former co-founder of the Security Justice Podcast, driven by a passion for sharing practical, real-world insights with the community.Areas of expertise include:Team Building & Leadership, Professional Services Strategy & Operations, Vulnerability Management, Offensive Security, Security Compliance, Penetration Testing, Red Teaming, Application Security, DevSecOps, Web Applications, Data Privacy, Product Security, Attack Surface Management, Physical Security, and Social Engineering.

Experience

1. Faculty

   IANS

   Nov 2024 — Present

Education

• University of Phoenix

  Bachelor's of Science, Information Technology

  2001 — 2004

• Lorain County Community College

  Associates, Network Communications Technology

  1998 — 2001

Skills

• Penetration Testing
• Vulnerability Assessment
• Information Security
• Security
• Network Security
• Computer Security
• Application Security
• Vulnerability Management
• Firewalls
• Security Awareness
• Social Engineering
• Cissp
• Security Policy
• Active Directory
• Web Application Security
• Information Security Management
• Linux
• Computer Forensics
• Windows
• Wireless Security
• Ceh
• Unix
• Disaster Recovery
• Mobile Security
• Mobile Applications
• Pci Dss
• Information Technology
• Security Audits
• Os X
• Risk Assessment
• Javascript
• Python
• Social Media
• Servers
• Intrusion Detection
• Data Security
• Mac Os X
• Wireless
• Wordpress
• Html