Joshua Morgan

Information Security Professional

About me

As a highly experienced Information Security Professional, I have a wealth of knowledge and skills gained from working in high-level Security Operations Centers. I hold a Master of Science in Cybersecurity and Information Assurance. I have also had the opportunity to present at multiple DEF CON security conferences.

In addition to my experience as a security analyst and my work in the field, I am also an instructor of Information Security for a local college. I am active in the security community at conferences and I keep myself sharp by participating in CTFs and maintaining relevant security-specific certifications. With my expertise and experience, I am confident in my ability to provide valuable insight and leadership to any team.

I have a passion for training and teaching people new to the industry and believe in the importance of sharing knowledge and experience to improve and grow together. Whether I am working as a leader or mentor, I am dedicated to providing valuable guidance and support to those around me.

If you're curious to dive deeper into my work, you can follow me:

Security Cyber Ranges/Capture The Flags

I have participated in some amazing Capture The Flag events. Here are a few:

Antisyphon Cyber Range ACE-T

Security Community Highlights

Packet Hacking Village
DEF CON
2021-Present

DEF CON 32 (2024):
Assisted with Packet Inspector/Packet Detective Workshops providing students with guidance and support as necessary.
DEF CON 31 (2023):
Assisted with Walk-Through Workshops providing insight and support for visitors, focusing on Honeypot Workshop using Cowrie.
DEF CON 30 (2022):
Assisted with Walk-Through Workshops, focusing on Network Operating System walkthrough.
DEF CON 29 (2021):
Assisted with Walk-Through Workshops, focusing on Honeypot Walkthroughs using Cowrie.

Blue Team Village
DEF CON
2022-Present

DEF CON 32 (2024):
Project Obsidian Lead
Crafted questions for annual Capture the Flag for Project Obsidian.
Assisted with documentation creation for backend processes within Project Obsidian operations.
DEF CON 31 (2023):
Project Obsidian
Presented talk (n)map Explorations based on a Threat Hunt walkthrough.
Assisted with Capture the Flag question generation.
DEF CON 30 (2022):
Project Obsidian
Presented talk Go Phish! Visualizing Basic Malice based on a Threat Hunt walkthrough.

Volunteer Staff
GrrCON
2023-Present

GrrCON 2024:
Volunteer Team
Track Operator Supporting Talk Tracks
GrrCON 2023:
Volunteer Team
Track Operator Supporting Talk Tracks

Volunteer Staff
Wild West Hackin Fest
2022-Present

WWHF 2024:
Volunteer Team
A/V Monitor Support, Classroom Setup
Way West 2022:
Volunteer Team
Moderator/Support for Resume Workshop Class

Volunteer Staff
ShellCon
2021

ShellCon 2021
Volunteer Team
Moderator/Support for Resume Workshop Class

Professional Security Certifications

See my Security-relevant certifications

CompTIA Security Analytics Professional (CSAP)

Earners of this certification are security analytics professionals that have the ability to plan and carry out security measures to protect an organization’s computer networks and systems.

GIAC GSEC

A cybersecurity certification that certifies a professionals knowledge of information security beyond simple terminology and concepts and ability to perform hands-on IT system security roles

CompTIA Cybersecurity Analyst+ (CySA+)

For cyber professionals tasked with incident detection prevention and response through continuous security monitoring

CompTIA Security+

A global certification that validates the baseline skills necessary to perform core security functions and pursue an IT security career

CompTIA Linux Network Professional (CLNP)

Earners of this certification are Linux network professionals that are able to provide hands-on support and to monitor critical internal and client systems.

CompTIA Project+

For IT Pros this shows the skills they need to successfully manage small to medium-sized projects

Skills

Discover my skills

SOC Runbook Design

Creating and designing procedures aimed at increasing flexibility and efficiency within the Security Operations Center.

Incident Response and Investigation

Responding to information security incidents and assisting with recovery efforts

SOC Automation

Increasing productivity and throughput of SOC efforts with automated actions utilizing existing platforms.

Security Training

Breaking down complex topics pertaining to security to help train new or existing staff.

Vendor Management

Building sustainable relationships with vendors to maximize return on investment.

Creative Solutions

You might not have exactly what you need to do what you want to do. I can try to find a way to accomplish it with what you have.

Get Secure

Ready to take your security program to the next level?

Hire me

Explore my insightful articles on my blog

View all posts »

I share my thoughts and insights on information security and other topics.

nMap Explorations - A Great Time - DEF CON 31 (Blue Team Village)