Josh Mitchell Email & Phone Number

Seattle, WA, US

New York, NY, US

• Head the Malware Analysis and Reverse Engineering Group, providing technical guidance for incident response investigations, litigation support, artificial intelligence, and proactive engagements.
• Utilize software reverse engineering to support investigations involving intrusion events, intellectual property theft, fraud, phishing campaigns, business email compromise, employee impropriety, and unauthorized.
• Communicate cyber risk analysis and assessments to C-suite leadership, legal counsel, and IT/InfoSec stakeholders.
• Spearhead efforts to expand in-house capabilities through the design and implementation of cutting-edge analysis/detection-as-code pipelines, AI task-force modernization, standardization of reporting, and maturation of.

San Francisco, California, US

Advisory role in the development and integration of video verification product.

Sydney, NSW, AU

• Collaborated with internal and external application security teams to provide reverse engineering, tool development, secure architecture, and vulnerability assessment services.
• Provided CISO-level guidance on security risk management and compliance based on findings from internal and external penetration tests.
• Directed incident response operations on internal breaches and conducted internal and external penetration tests.
• Taught external classes on penetration testing and incident response and performed independent research to integrate results into product offerings.

Denver, Colorado, US

• Conducted comprehensive vulnerability analysis, including source, static, and dynamic code-based reviews, identifying and exploiting vulnerabilities impacting billions of devices.
• Discovered vulnerabilities in the Microsoft Windows platform, widely deployed open-source and closed-source software, and smartphone software.
• Carried out software exploitation to bypass protection mechanisms such as ASLR, DEP, CFG, and other application and operating system mechanisms.
• Eliminated exploitation artifacts by writing specialized code, including custom shellcode, continuation of execution, and ROP techniques.

Nashville, Tennessee, US

• Developed proprietary techniques to perform static and dynamic vulnerability and malware analysis tests on petabytes of Android applications across multiple markets.
• Developed Android kernel and user-land exploit prevention mechanisms and detection techniques to improve customer security.
• Developed Android anti-theft and update management applications/services.

Arlington, VA, US

• Developed software exploitation capabilities for Microsoft Windows, Android, and Symbian platforms.

Fairfax, VA, US

• Oversaw the operation of a cutting-edge malware analysis laboratory, including task selection, prioritization, and training of junior members.
• Performed malware analysis, including behavioral and code-based reviews, researching emerging malware capabilities and delivery techniques.
• Integrated countermeasures and mitigation techniques into software development lifecycle processes.
• Followed protocols for disassembly and reconstruction; reversed compiler-optimized, obfuscated, polymorphic, and metamorphic software; verified attack vectors.
• Authored technical reports and reverse engineering course material.

Master'S Degree, Data Science

Bachelor Of Science - Bs, Computer Science