Marc David is a CISSP-certified Staff Security Engineer with 8+ years in dedicated security roles inside regulated healthcare, and the host of Byte-Sized Security. He describes his work in one line: "I get security tooling adopted by engineering teams who do not report to me." Most security programs fail at adoption, not at tool selection. Marc has driven API security monitoring, device trust, browser-based data loss prevention, and continuous mobile penetration testing to full coverage across engineering, IT, and platform groups where he holds no authority over anyone. His background spans HIPAA, HITRUST, and SOC 2 compliance, security automation, and awareness training built for people who never wanted training. Marc lives in the San Francisco Bay Area and speaks on security adoption, healthcare compliance, and automation.