Joshua N.

I built out the AppSec program at OpenLending from manual processes and coverage gaps to a semi-autonomous system. I am a member of OpeLending's Artificial Intelligence Governance Board, and build internal tooling for evaluating and securing our Generative AI projects. I've led PoCs - and in some cases deployed - solutions for SAST and OSS Dependency scanning, Zero-Trust Network Access, and internal Large Language Model tooling. I've implemented automation around monitoring and rotation of TLS certificates and secrets across our source control and cloud environment, and have guided the secure design of our REST APIs. I'm an active contributor to our development and architecture teams, and built out a standardized process for penetration tests against our application. I also held a lunch and learn where I taught everyone how to make music using a web browser. :)

My primary project has been to lead OpenLending's Generative AI initiative from an Application Security perspective. I've organized and participated in meetings with Microsoft engineers to stand up a PoC application in our Azure environment, worked with infrastructure and data engineers in our company to develop a testing environment and a synthetic dataset to validate both the accuracy and the security of exposing company data through these models, and guided the direction of the project from the ground up. Other projects include: - Creating a python script to automatically scan our company network and gather SSL certificate information from all associated hosts, and converting that script to run in Ansible. - Creating a python script to extract CIS Benchmarking data and customize a Wazuh benchmark file based on that data, as well as hand-crafting an Active Directory GPO file to conform to those benchmarks. - Designing Splunk Alerts and Dashboards to monitor our VPN traffic. - Performing security audits of our organization's GitHub repositories and application architecture to identify risks.

I helped beta test KiloHearts Phase Plant, as well as all products/updates since its release.

I teach students all over the world about how to write music, design sounds with synthesizers and samples, and mix/master their own music!

I created custom sound effects, soundtracks, and voice-overs for video games, short films, and animations! I also did dialogue editing, recording, and mixing/mastering for various clients.

Coordinating with team members to plan and execute corporate and private A/V events. Organizing CRM Database across multiple platforms and communicating with clients to suit their individual needs.