I will be at GrrCON 2025! See you there!»

Security Advocate | Trainer | Leader

Joshua Morgan

About me

As an accomplished security authority, I've built a reputation for delivering top-notch security solutions that make a real impact. I have a wealth of knowledge and skills gained from working in high-level Security Operations Centers. With a Master's degree in Cybersecurity and Information Assurance, I've had the privilege of sharing my expertise at renowned events like DEF CON and BSides.

Beyond my experience as a security analyst, I'm also passionate about empowering the next generation of cybersecurity professionals through teaching and mentorship. As an instructor for a college Masters-level program, I get to help shape the future of our industry by passing on my knowledge and skills. I am active in the security community at conferences and I keep myself sharp by participating in CTFs and maintaining relevant security-specific certifications. With my expertise and experience, I am confident in my ability to provide valuable insight and leadership to any team.

What drives me is a passion for collaboration, growth, and continuous learning. Whether I'm leading a team, mentoring a colleague, or diving into analysis, my goal is always to provide actionable insights and support that makes a tangible difference. Let's connect and explore how we can work together to secure the future!


Check out more about me:
Blog | Videos | CTFs | Talks | Community | Certs | Skills


If you're curious to dive deeper into my work, you can contact me today!


Contact Me:

Email: [email protected]
Book Time: Availability Schedule

Security Cyber Ranges/Capture The Flags

I have participated in some amazing Capture The Flag events. Here are a few:

Security Conference Presentations

DEF CON
Las Vegas, NV

August 2025

Incident Response 101: What Happens After The Hack?

BSides San Diego
San Diego, CA

March 2025

From RTFM to BTFM

DEF CON
Las Vegas, NV

August 2023

(n)map Explorations
Watch nMap Explorations

DEF CON
Las Vegas, NV

August 2022

Go Phish! Visualizing Basic Malice
Watch Go Phish!

Security Community Highlights

Packet Hacking Village
DEF CON
2021-Present

DEF CON 33 (2025):
Assisted with Packet Inspector/Packet Detective Workshops providing students with guidance and support as necessary.
Assisted Hardwired team - training guests on how to terminate RJ45/Ethernet Cables.
DEF CON 32 (2024):
Assisted with Packet Inspector/Packet Detective Workshops providing students with guidance and support as necessary.
DEF CON 31 (2023):
Assisted with Walk-Through Workshops providing insight and support for visitors, focusing on Honeypot Workshop using Cowrie.
DEF CON 30 (2022):
Assisted with Walk-Through Workshops, focusing on Network Operating System walkthrough.
DEF CON 29 (2021):
Assisted with Walk-Through Workshops, focusing on Honeypot Walkthroughs using Cowrie.

Blue Team Village
DEF CON
2022-Present

DEF CON 33 (2025):
Presented talk "Incident Response 101: What Happens After the Hack?" for Project Obsidian's Blue Team 101 series of talks.
Project Obsidian Lead
Crafted questions for annual Capture the Flag for Project Obsidian.
DEF CON 32 (2024):
Project Obsidian Lead
Crafted questions for annual Capture the Flag for Project Obsidian.
Assisted with documentation creation for backend processes within Project Obsidian operations.
DEF CON 31 (2023):
Project Obsidian
Presented talk (n)map Explorations based on a Threat Hunt walkthrough.
Assisted with Capture the Flag question generation.
DEF CON 30 (2022):
Project Obsidian
Presented talk Go Phish! Visualizing Basic Malice based on a Threat Hunt walkthrough.

Volunteer Staff
GrrCON

2023-Present

GrrCON 2024:
Volunteer Team
Track Operator Supporting Talk Tracks
GrrCON 2023:
Volunteer Team
Track Operator Supporting Talk Tracks

Volunteer Staff
Wild West Hackin Fest

2022-Present

WWHF Mile High 2025:
Volunteer Team
A/V Monitor Support, Classroom Setup
WWHF 2024:
Volunteer Team
A/V Monitor Support, Classroom Setup
Way West 2022:
Volunteer Team
Moderator/Support for Resume Workshop Class

Volunteer Staff
ShellCon

2021

ShellCon 2021
Volunteer Team
Moderator/Support for Resume Workshop Class

Professional Security Certifications

See my Security-relevant certifications

CompTIA Security Analytics Professional (CSAP)

Earners of this certification are security analytics professionals that have the ability to plan and carry out security measures to protect an organization’s computer networks and systems.

GIAC GSEC

A cybersecurity certification that certifies a professionals knowledge of information security beyond simple terminology and concepts and ability to perform hands-on IT system security roles

CompTIA Cybersecurity Analyst+ (CySA+)

For cyber professionals tasked with incident detection prevention and response through continuous security monitoring

CompTIA Security+

A global certification that validates the baseline skills necessary to perform core security functions and pursue an IT security career

CompTIA Linux Network Professional (CLNP)

Earners of this certification are Linux network professionals that are able to provide hands-on support and to monitor critical internal and client systems.

CompTIA Project+

For IT Pros this shows the skills they need to successfully manage small to medium-sized projects

Skills

Discover my skills

SOC Runbook Design

Creating and designing procedures aimed at increasing flexibility and efficiency within the Security Operations Center.

Incident Response and Investigation

Responding to information security incidents and assisting with recovery efforts

SOC Automation

Increasing productivity and throughput of SOC efforts with automated actions utilizing existing platforms.

Security Training

Breaking down complex topics pertaining to security to help train new or existing staff.

Vendor Management

Building sustainable relationships with vendors to maximize return on investment.

Creative Solutions

You might not have exactly what you need to do what you want to do. I can try to find a way to accomplish it with what you have.

Get Secure

Ready to take your security program to the next level?

Check out the blog!

View all posts »

Some thoughts and observations