About Us

Dennis King, MBA

Principal Advisor and Investigator

I partner with corporate leaders, boards, and outside legal counsel to develop rational, high-impact strategies that protect critical cloud infrastructure, manage systemic risk, and investigate internal threats.

I deliberately operate a specialized, independent advisory practice. When you retain Working Security, you are not buying a rotating door of junior analysts or outsourced contractors. You get direct, uncompromised access to my 20+ years of engineering, business, and investigative experience.

schedule a meeting
The Intersection of Business, Engineering, and Law

True security cannot exist in a vacuum. My practice is built on a rare combination of credentials that allows me to bridge the gap between the server room, the boardroom, and the courtroom:

  • The Engineering Discipline: With a B.S. in Engineering from Purdue University, I possess the deep technical roots required to understand exactly how your cloud infrastructure, identity systems, and applications are architected.
  • The Business Strategy: Holding an MBA from Washington University in St. Louis, I view security through the lens of risk management, operational continuity, and fiscal responsibility—ensuring security investments protect the balance sheet without hindering business velocity.
  • The Investigative Rigor: As a Licensed Missouri Private Investigator, my digital forensics and corporate insider threat investigations are conducted with the legal precision required to stand up in a court of law.
Core Philosophy & Focus Areas

I have managed global technical teams, architected web solutions, and secured sensitive data across the U.S., Canada, Europe, and Africa. Today, I focus that enterprise-grade experience exclusively on three critical domains:

1. vCISO Advisory & Governance

I help organizations transition away from reactive, check-the-box compliance. By embracing Zero Trust Architecture from a design perspective and Continuous Threat Exposure Management (CTEM) from a policy and process view, I build proactive security programs tailored to your specific business risk.

2. Cloud Posture & SaaS Auditing

Modern risk lives in the cloud. Leveraging my CCSK framework alignment, I conduct independent audits of AWS, Azure, and Google Cloud environments, with a heavy emphasis on Identity and Access Management (IAM), conditional access, and misconfiguration drift. I also specialize in auditing productivity suites (Microsoft 365 and Google Workspace) to detect shadow IT, data exfiltration, and insider risk.

3. Attorney-Retained Digital Forensics

When internal issues arise, discretion and legal privilege are paramount. I specialize in corporate forensic investigations—including intellectual property theft, departing employee misconduct, and corporate espionage. My status as a licensed investigator allows me to be retained directly by outside counsel under the Work Product Doctrine, ensuring sensitive findings remain privileged.

Professional Credentials:

  • Certified Cloud Security Knowledge (CCSK) – Cloud Security Alliance
  • Certified Chief Information Security Officer (C|CISO) – EC-Council
  • Certified Information Systems Security Professional (CISSP) – ISC²
  • GIAC Certified Forensic Analyst (GCFA) – SANS Institute
  • Licensed Private Investigator – State of Missouri (Lic #2024028325)
  • Project Management Professional (PMP) – Project Management Institute
  • MBA – Washington University in St. Louis
  • B.S. Engineering – Purdue University

Beyond the Technology

I am an active contributor to the cybersecurity community, regularly writing for industry journals and speaking at professional organizations. My mission is to strip away the vendor hype and make information security actionable, understandable, and strategically valuable for business leaders.

Need a trusted advisor for your next strategic initiative?
Schedule a confidential consultation directly with me.

Engagement Models & Advisory Services

I offer flexible engagement models designed to align with your organization’s strategic needs, operational cadences, and legal timelines.

  • Strategic Retainers (vCISO): Structured on a recurring monthly retainer to provide ongoing governance, Zero Trust architecture design, and Continuous Threat Exposure Management (CTEM) oversight. This models ensures consistent executive-level security leadership without the cost of a full-time hire.
  • Fixed-Scope Audits: Cloud posture evaluations (AWS, Azure, GCP) and productivity suite reviews (M365, Google Workspace) are delivered as fixed-fee, milestone-based projects with clearly defined deliverables.
  • Investigative & Legal Retainers: Digital forensics, insider threat investigations, and expert witness services require an upfront retainer. I work directly with outside counsel to maintain attorney-client privilege under the Work Product Doctrine.

Get Started: All engagements begin with a confidential discovery call to assess your organization’s specific risk profile and operational needs.

Ethics, Standards, and Professional Conduct

As a licensed investigator and certified security executive, my work is guided by uncompromised integrity and adherence to the highest legal and professional codes of conduct. I strictly operate within the ethical canons and professional standards of the industry’s leading bodies:

Industry Engagement & Affiliations

Staying ahead of the threat landscape requires active engagement with the global security, engineering, and investigative communities. I maintain active affiliations and ongoing engagement with:

  • The Cloud Security Alliance (CSA)
  • SANS Institute (Systems Administration, Networking, and Security)
  • Institute of Electrical and Electronics Engineers (IEEE)
  • Information Systems Security Association (ISSA)
  • Missouri Private Investigator Association (MPIA)