Josh Lemon

Josh Lemon is the Chief of Digital Forensics and Incident Response at SoteriaSec, with more than two decades of experience leading complex security investigations for multinational organisations, government agencies, law enforcement, law firms, and local businesses. He specialises in helping organisations detect, investigate, and eradicate cybercriminals and targeted threat actors from their networks, and is frequently called upon to provide expert witness testimony for legal cases involving breaches and incident response.

Josh serves as a Principal Instructor for SANS Institute’s “Advanced Incident Response and Threat Hunting", "Enterprise Cloud Forensics”, and “Advanced Network Forensics and Threat Hunting” courses.

In addition to his technical expertise, Josh has extensive experience building operational teams, developing cyber security policies, procedures, and operational frameworks for both large enterprises and smaller organisations. As a member of the Standards SIG within FIRST, he contributes to the development of international standards for CSIRTs and security operations centres.

Before joining SoteriaSec, Josh held leadership roles including Director of Global Managed Detection and Response at Uptick, Managing Director for Ankura’s APAC DFIR practice, Director within Salesforce’s international Security Response Centre, and CSIRT Manager for the Commonwealth Bank of Australia, along with leading technical cyber security services for BAE Systems Applied Intelligence across the Asia Pacific.