
Senior Vice President, SpiderLabs at Trustwave
Greater Chicago Area

Senior Vice President, SpiderLabs at Trustwave
Greater Chicago Area
Nicholas is Senior Vice President of SpiderLabs at Trustwave. He has more than 14 years of information security experience. In his role at Trustwave, he leads SpiderLabs, the team that has performed more than 500 computer incident response and forensic investigations globally, thousands of penetration and application security tests for clients. Nicholas acts as the lead security adviser to many of Trustwave’s premier clients by assisting them in making strategic decisions around various security compliance regimes. In 2004, Nicholas drafted an application security framework that became known as the Payment Application Best Practices (PABP). In 2008, this framework was adopted as a global standard called Payment Application Data Security Standard (PA-DSS). As a speaker, he has provided unique insight around security breaches and trends to public (MRC, ETA, YSTS, DEFCON, SecTor, etc.) and private audiences throughout North America, South America, Europe, and Asia. Prior to Trustwave, Nicholas ran security consulting practices at both VeriSign and Internet Security Systems. Nicholas earned a Bachelor of Science in Computer Science from Illinois State University.
Computer Forensic Investigations, Application Security, Penetration Testing, Malware Research, Information Security, Consulting Practice Management, Public Speaking, Payment Card Industry Security Standards Council (PCI SSC) Qualified Security Assessor (QSA), Payment Application Qualified Security Assessor (PA-QSA), Visa Qualified Incident Response Assessor (QIRA)
(Privately Held; Computer & Network Security industry)
January 2003 — Present (7 years )
(Public Company; VRSN; Computer & Network Security industry)
September 2001 — January 2003 (1 year 5 months)
(Privately Held; 51-200 employees; Computer & Network Security industry)
June 2000 — September 2001 (1 year 4 months)
(Public Company; IBM; Computer & Network Security industry)
April 1999 — June 2000 (1 year 3 months)
(Privately Held; 51-200 employees; Computer & Network Security industry)
November 1998 — April 1999 (6 months)
(Computer & Network Security industry)
May 1997 — November 1998 (1 year 7 months)
BS , Computer Science , 1993 — 1997
1989 — 1993