Joshua Wright

His path into cybersecurity began with an unusual career opportunity: after being caught hacking into Johnson & Wales University, his alma mater, he was subsequently hired by the institution. That early curiosity developed into a career conducting penetration tests and vulnerability assessments across enterprise environments and national infrastructure. As a Senior Security Analyst at InGuardians, he specialized in offensive operations and protocol exploitation. Today, at Counter Hack, he leads cybersecurity consultants conducting penetration tests and red-team simulations, bringing current practitioner experience into the classroom and the challenges he develops for students.

Beyond his consulting work, Joshua has made significant contributions to security research, technical education, and publishing. He is the author of Dynamic Incident Response: A Framework for Security Teams, a freely available SANS publication that introduces an iterative approach to incident response, helping teams adapt their investigative and containment decisions as new evidence emerges. He also co-authored Hacking Exposed Wireless, Third Edition and developed open-source tools including KillerBee for ZigBee security testing and KillerZee for Z-Wave research. His work reflects a longstanding commitment to making practical security techniques, research, and educational resources accessible to the broader community.

At SANS, his contributions extend beyond SEC504 and the classroom. As Dean of Students at the SANS Technology Institute, an NSA Center of Academic Excellence in Cyber Defense, he supports students pursuing advanced cybersecurity education and helps develop the next generation of practitioners. His contributions to teaching and academic leadership were recognized with the Institute's 2023 Instructor of the Year award, selected by his peers. He has also mentored fellow instructors and helped shape SANS training through more than two decades of curriculum development and instruction.

In the classroom, Joshua is recognized for his approachable teaching style and focus on practical, hands-on learning. Students describe his ability to break down complex concepts and build resilience through exercises that replicate real adversary behavior. Beyond his formal roles, he supports the community by maintaining open-source projects, mentoring emerging professionals, and volunteering his talents as a nonprofit photographer. His career reflects a consistent belief that strong defenders are developed not only through technical skills but also through collaboration, creativity, and human connection.

Qualifications Summary

• SANS Faculty Fellow; Senior Technical Director at Counter Hack Innovations
• Author of SEC504: Hacker Tools, Techniques, and Incident Handling
• Dean of Students at the SANS Technology Institute; recipient of the 2023 Instructor of the Year award
• Bachelor of Science in Information Science from Johnson & Wales University
• Author of Dynamic Incident Response: A Framework for Security Teams (DAIR) and co-author of Hacking Exposed Wireless, Third Edition
• Experience spanning penetration testing, red-team operations, wireless security research, protocol exploitation, and incident response
• Developer of open-source security tools including KillerBee and KillerZee, supporting ZigBee and Z-Wave security research
• Designer of large-scale capture-the-flag challenges and adversary simulations; active contributor to the cybersecurity community through research, mentoring, and nonprofit volunteer work