Share post:
In 2016, three security veterans walked into a small red barn in Herndon, Virginia with a simple but audacious goal: fix what's fundamentally broken about managed security services. Eight years later, Dave Merkel—CEO and Co-Founder of Expel—has built one of cybersecurity's most trusted brands by delivering something radical: actually keeping the promises the industry makes.
With nearly three decades spanning federal cyber investigations, building AOL's first incident response team, and serving as Mandiant's CTO through its FireEye acquisition, Merkel brings unparalleled perspective to DMV Rising 2025's "Category Creators: Finding Product Market Fit" panel. He's not just another security executive—he's a repeat Washingtonian Tech Titan who's reshaped how organizations think about detection and response.
Three reasons Merkel is uniquely positioned to discuss building category-defining cybersecurity companies:
He's lived the entire security lifecycle. Starting as a special agent with the Air Force Office of Special Investigations pursuing cyber criminals in the era of floppy disks and 2400 baud modems, Merkel built AOL's first incident response capability, then spent a decade as CTO and VP of Products at Mandiant before becoming FireEye's global CTO post-acquisition. This rare combination of practitioner, builder, and executive experience gives him unmatched perspective on what actually works versus what just sounds good.
He identified and solved the industry's core contradiction. After witnessing firsthand how MSSPs consistently overpromised and underdelivered, Merkel and co-founders Yanek Korff and Justin Bajko tackled three fundamental problems: too many confusing alerts with few answers, insufficient security talent to manage risk, and platforms that fail to deliver on their promises. Expel's approach—transparent, effective managed detection and response—has resonated so strongly that Washingtonian has named him to their Tech Titans list six times since 2015.
He's become the trusted voice on real security outcomes. Featured in outlets from The Washington Post to Forbes to Bloomberg, Merkel has established himself as the go-to expert who can translate complex security challenges into business reality. His message is refreshingly direct: "No empty promises—just protection you can trust." This philosophy has guided Expel from a small red barn in Herndon to a company protecting hundreds of organizations globally.
Why This Matters for the DMV
Merkel's story is quintessentially DMV—starting in federal service, building critical infrastructure at AOL, and launching Expel in Herndon, Virginia. His success demonstrates how the region's unique blend of government expertise, enterprise experience, and entrepreneurial spirit creates companies that don't just enter markets—they redefine them. For a region home to federal agencies, contractors, and enterprises all struggling with alert fatigue and the security talent shortage, Expel's managed detection and response model offers a blueprint for turning regional expertise into scalable solutions.
The "Category Creators" panel will explore how founders identify unaddressed market needs, build trust in novel security approaches, and scale businesses that challenge industry assumptions. Merkel will share insights alongside Mike Brown (Co-Founder & CTO, Strider Technologies) and John Ackerly (Founder & CTO, Virtru), moderated by Mishi Choudhary (General Counsel, Virtru).
Don't miss your chance to hear from a leader who transformed three decades of security experience into a company that's finally delivering on the industry's long-standing promises.