Assessment workflow
Bring assessment notes, evidence, findings, review, and branded report generation into a connected workflow.
Knoxville, TN · Military veteran
Joshua WhitneyOffensive Security
& AI Engineering.
Senior Cyber Security Engineer specializing in offensive security, red team operations, AI engineering, and security automation. I lead complex security assessments, build custom tools and infrastructure, and develop AI-driven solutions that improve how security teams work.
Featured project
ODIN
Security assessment management, reporting & automation.
Architect & Lead DeveloperInternal beta
I built ODIN to address a problem I encountered in offensive security: turning scattered assessment notes, evidence, and findings into consistent, actionable deliverables. It brings security operations and software engineering together in a platform designed around the assessment workflow.
Applied AI
Integrate AI-assisted preparation and reporting through a controlled model gateway with pseudonymisation and data-egress checks.
Full-stack delivery
Build the internal application, background reporting workers, and a separate client portal connected through a dedicated sync API.
- Python
- FastAPI
- React
- TypeScript
- PostgreSQL
- Docker
Career
Professional experience.
Senior Cyber Security Engineer
- Independently lead internal and external penetration testing, red team operations, social engineering, and cloud security assessments across AWS, Azure, and GCP.
- Architect and maintain red team infrastructure, custom security tools, scripts, and automation to improve assessment execution.
- Solely architected and developed ODIN, a penetration testing management platform in internal beta, bringing scoping, client management, secure communications, reporting, and invoicing into one workflow.
- Spearheaded a commercial AI-assisted penetration testing service, contributing custom capabilities within Dreadnode and researching emerging offensive security technologies.
- Mentor security engineers and manage client engagements from scoping through technical execution, reporting, and remediation guidance.
Help Desk Manager – LXGE
- Led help desk technical operations, employee training, performance management, and service delivery.
- Standardized support procedures and implemented an AI-powered knowledge base to improve resolution and reduce repetitive requests.
Help Desk Tier 2 – SME
- Resolved complex IT issues, mentored support personnel, and collaborated with engineering teams to improve system reliability and operational efficiency.
Owner / Operator
- Provided IT consulting and technology advisory services, including infrastructure improvements, process automation, and cloud solutions.
Air and Missile Defense Command
- Operated, maintained, and troubleshot radar, command-and-control systems, and network infrastructure supporting operational readiness.
Expertise
Technical skills.
Offensive security
- Internal / external penetration testing
- Red team operations
- Social engineering
- Cloud security assessments: AWS, Azure, GCP
AI engineering
- AI-assisted security testing
- LLM integration
- Claude SDK
- OpenRouter
- Dreadnode
Development
- Python
- TypeScript
- React
- FastAPI
- PostgreSQL
- REST APIs
Infrastructure & security
- Docker
- Cloudflare
- Garage S3
- Google OAuth
- Argon2
- Security automation
Certifications
CPTSCertified Penetration Testing SpecialistHack The Box
MCRTEMicrosoft Cloud Red Team ExpertPwned Labs
CRTOCertified Red Team OperatorZero-Point Security
CRTPCertified Red Team ProfessionalAltered Security
CRTECertified Red Team ExpertAltered Security
PNPTPractical Network Penetration TesterTCM Security
Education
Academic background.
Full Sail University
Mobile Application Design & Development
Nova SouthEastern
Computer Networking
Capella University
Criminal Justice / Security Management
For recruiters & hiring teams
Let’s talk about your team.
Contact me about opportunities in offensive security, red team operations, AI engineering, and security automation.