Jom Josh

I am a Cybersecurity-Spezialist with practical experience in Penetrationstests, Schwachstellenanalyse and SOC-Betrieb. As a Certified Ethical Hacker (CEH), I combine hands-on security testing with systematic analysis of threats, weaknesses, and incidents.

I’ve worked on building and improving security in real environments—developing secure web features like Benutzerauthentifizierung, Zahlungsworkflows, and input validation to protect against Web-Angriffen. I also enjoy developing Sicherheits-Tools and automating security processes with Python, while grounding my work in frameworks such as NIST and ASVS.

My expertise spans Threat Modeling, Incident Response, SIEM operations (Splunk), Threat Hunting, and Log Analyse, plus PKI and Webanwendungssicherheit. Through projects and practice labs, I’ve performed OWASP Top 10 analysis, certificate/cryptographic protocol understanding, and network traffic analysis with Wireshark, while using tools like Nmap and Burp Suite to validate findings.