Joshua Rahman

About Joshua Rahman

Information Security engineer with a strong focus and passion for cybersecurity and application security. Experience includes application security testing and security tools development. Experience also includes intrusion analysis, web application vulnerability assessments /management/penetration testing, android/windows application assessments, awareness of a wide variety of open source tools and developing scalable tools. Leadership experience includes being an internal penetration testing lead and conducting developer training. Experience with designing and deploying both end to end products and tooling in AWS and Google Cloud. Experience with integrating security in CI/CD pipelines with a shift left approach.

Experience

1. Red Team and Ai Research Lead

   Maveris

   Apr 2025 — Present

   Run red team operations against federal agency infrastructure spanning 10+ million users - find architectural security gaps and work with teams to fix them• Created tooling to support 50+ concurrent red team operations with built in AI capabilities• Discovered Critical vulnerabilities (CVSS 9.8) in federal systems and worked with partner team to ensure remediation• Researched fully custom LLM powered AI agents that can both act as operator partners and for fully automated security evaluation• Researched fully custom LLM powered AI agents that can both act as operator partners and for fully automated security evaluation• Developed fully custom AI agents and MCP tooling with a privacy first focus using tooling such as golang, python, Litellm, Google ADK and OpenAI SDK• Conducted both manual and automated (custom rules) code review on over 3 million lines of code

Education

• Sleepy Hollow High School

  Diploma

  2000 — 2002

• Stony Brook University

  Computer Science

  2003 — 2005

• Western Governors University

  Bachelor of Science - BS, Cybersecurity and Information Assurance

  2017 — 2017