Spencer Koch

Offensive Security Professional – Various

Spencer Koch is an offensive security professional with extensive experience in both consulting and industry, having served as the former North American CISO at a large energy company. His passion lies in AppSec/pentesting, and he’s interested in improving the security status-quo while making security less painful for developers/sys-admins/users. He leads large-scale security transformation programs, successfully implementing realistic hardening initiatives, transforming AppSec from “print to PDF” SAST/DAST report generation to “developers come to talk to us for advice,” figuring out what’s “good enough” for security to throw “all the things” into the cloud, and automating the heck out of anything possible because who has time? Husband and father of two boy littles, based out of Houston currently, hailing originally from Dallas, and educated in Illinois.

[gravityform id="172" title="false" description="false"]
<script type="text/javascript">var gform;gform||(document.addEventListener("gform_main_scripts_loaded",function(){gform.scriptsLoaded=!0}),window.addEventListener("DOMContentLoaded",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,initializeOnLoaded:function(o){gform.domLoaded&&gform.scriptsLoaded?o():!gform.domLoaded&&gform.scriptsLoaded?window.addEventListener("DOMContentLoaded",o):document.addEventListener("gform_main_scripts_loaded",o)},hooks:{action:{},filter:{}},addAction:function(o,n,r,t){gform.addHook("action",o,n,r,t)},addFilter:function(o,n,r,t){gform.addHook("filter",o,n,r,t)},doAction:function(o){gform.doHook("action",o,arguments)},applyFilters:function(o){return gform.doHook("filter",o,arguments)},removeAction:function(o,n){gform.removeHook("action",o,n)},removeFilter:function(o,n,r){gform.removeHook("filter",o,n,r)},addHook:function(o,n,r,t,i){null==gform.hooks[o][n]&&(gform.hooks[o][n]=[]);var e=gform.hooks[o][n];null==i&&(i=n+"_"+e.length),gform.hooks[o][n].push({tag:i,callable:r,priority:t=null==t?10:t})},doHook:function(n,o,r){var t;if(r=Array.prototype.slice.call(r,1),null!=gform.hooks[n][o]&&((o=gform.hooks[n][o]).sort(function(o,n){return o.priority-n.priority}),o.forEach(function(o){"function"!=typeof(t=o.callable)&&(t=window[t]),"action"==n?t.apply(null,r):r[0]=t.apply(null,r)})),"filter"==n)return r[0]},removeHook:function(o,n,t,i){var r;null!=gform.hooks[o][n]&&(r=(r=gform.hooks[o][n]).filter(function(o,n,r){return!!(null!=i&&i!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][n]=r)}});</script> <div class='gf_browser_unknown gform_wrapper gravity-theme' id='gform_wrapper_172' ><form method='post' enctype='multipart/form-data' id='gform_172' action='/about-us/spencer-koch/' novalidate> <div class='gform_body gform-body'><div id='gform_fields_172' class='gform_fields top_label form_sublabel_below description_below'><div id="field_172_3" class="gfield gfield_contains_required field_sublabel_below field_description_below gfield_visibility_visible" data-js-reload="field_172_3"><label class='gfield_label' for='input_172_3' >Email<span class="gfield_required"><span class="gfield_required gfield_required_text">(Required)</span></span></label><div class='ginput_container ginput_container_email'> <input name='input_3' id='input_172_3' type='email' value='' class='large' aria-required="true" aria-invalid="false" /> </div></div><fieldset id="field_172_5" class="gfield gfield--width-full field_sublabel_below field_description_below hidden_label gfield_visibility_visible" data-js-reload="field_172_5"><legend class='gfield_label gfield_label_before_complex' >Opt-in</legend><div class='ginput_container ginput_container_consent'><input name='input_5.1' id='input_172_5_1' type='checkbox' value='1' aria-describedby="gfield_consent_description_172_5 gfield_description_172_5" aria-invalid="false" /> <label class="gfield_consent_label" for='input_172_5_1' >Communications Opt-In</label><input type='hidden' name='input_5.2' value='Communications Opt-In' class='gform_hidden' /><input type='hidden' name='input_5.3' value='176' class='gform_hidden' /></div><div class='gfield_description gfield_consent_description' id='gfield_consent_description_172_5'>I understand that by subscribing I will receive research and occasional promotional emails from Security Compass, as described in the Privacy Policy, and can unsubscribe anytime.</div></fieldset><div id="field_172_6" class="gfield gform_validation_container field_sublabel_below field_description_below gfield_visibility_visible" data-js-reload="field_172_6"><label class='gfield_label' for='input_172_6' >Comments</label><div class='ginput_container'><input name='input_6' id='input_172_6' type='text' value='' autocomplete='new-password'/></div><div class='gfield_description' id='gfield_description_172_6'>This field is for validation purposes and should be left unchanged.</div></div></div></div> <div class='gform_footer top_label'> <input type='submit' id='gform_submit_button_172' class='gform_button button' value='Submit' onclick='if(window["gf_submitting_172"]){return false;} if( !jQuery("#gform_172")[0].checkValidity || jQuery("#gform_172")[0].checkValidity()){window["gf_submitting_172"]=true;} ' onkeypress='if( event.keyCode == 13 ){ if(window["gf_submitting_172"]){return false;} if( !jQuery("#gform_172")[0].checkValidity || jQuery("#gform_172")[0].checkValidity()){window["gf_submitting_172"]=true;} jQuery("#gform_172").trigger("submit",[true]); }' /> <input type='hidden' class='gform_hidden' name='is_submit_172' value='1' /> <input type='hidden' class='gform_hidden' name='gform_submit' value='172' /> <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' /> <input type='hidden' class='gform_hidden' name='state_172' value='WyJ7XCI1LjFcIjpcImVlOGY1NWEyMTVhNGZjNGJhMDlkNWI5OTY0MDg0ODEyXCIsXCI1LjJcIjpcIjAzZTAzZDQxMWY1YzNmODViOTQ1OGYwMWE1Y2ZkNmE0XCIsXCI1LjNcIjpcImVlZDA5YjgwNTQwZmM4ZDM3ZjM4ZTQ4OThkMGEyZWQxXCJ9IiwiYzNkZmU1MjM5MDVmMTYwMzFkNWE4YjJlOTJlYTBlN2EiXQ==' /> <input type='hidden' class='gform_hidden' name='gform_target_page_number_172' id='gform_target_page_number_172' value='0' /> <input type='hidden' class='gform_hidden' name='gform_source_page_number_172' id='gform_source_page_number_172' value='1' /> <input type='hidden' name='gform_field_values' value='' /> </div> </form> </div>