There are many times when a potential client or organization wishes for me to provide them with a “bio”, so they can tell others who I am.  Various types of bios are stored on this page just grab the one you want.

Short Bio

Josh has more than eighteen years of experience in security, IT, development and system and network administration. Currently, he runs Eyra Security, a security and business improvement consulting firm based in Minneapolis, MN. Josh holds several security and technical certifications and has served in a leadership position on several security-focused groups. He has written several books on I.T. and Information Security, with the aim of applying to I.T. lessons learned from outside the core discipline, such as Agile/Lean Principles, Natural History, Psychology, Economics and Complexity Science. Josh specializes in the overlap between security and business practices, including vendor/customer management, technology transitions, and security as competitive advantage.

Certifications and Affiliations

• SANS: GIAC-GSLC Gold, GIAC-GCIH Gold
• ISC²: CISSP
• IANS Faculty
• Infragard: Former president of the Iowa Cyber sector industries finest and technical how-to segments. Paul has extensive experience in penetration testing, vulnerability analysis, embedded device security and SCADA/ICS.
• Central Iowa Area Linux Users Group: President Emeritus
• Member of ISSA
• Member of Agile Iowa
• Member of OWASP
• Member of DC612
• Red Hat Certified Engineer
• Novell Certified Linux Professional

Publications

• UTM Security with Fortinet: Mastering FortiOS (co-authored)
• Assessing Vendors: A Hands-On Guide to Assessing Infosec and IT Vendors
• Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
• Breaking In to Information Security: Crafting a Custom Career Path to Get the Job You Really Want (co-authored)

Print Bio

A version of my bio that is made available for print purposes can be found here. If you need a single page bio, just use page one.

Long Bio

Josh More runs Eyra Security, a consulting firm focused on security and business improvement.  In this position, he brings over eighteen years in security and information technology.

Josh More views security as more than just a cost center. Properly addressing security risks can be an opportunity to improve other aspects an organization from tactical issues such as workflow and task management to strategic-level issues such as acquisitions and project management. This work involves traditional identification of weaknesses and threats, but also requires social mapping determining appropriate responses and conveying the information to the various stakeholders in numerous companies.  He focuses on striking the proper balance between protecting against likely threats without consuming resources that could be better used elsewhere.  He recognizes that perfect protection becomes stagnant and hampers innovation and competition.  As such, all security projects are approached in a way to reach a comfortable level of safety while maximizing flexibility and future capabilities.  As security works best from a holistic approach, he works all angles:  risk assessments, compliance reviews, audits, posture analysis, incident response, malware analysis, infrastructure defense, system forensics, employee training and business strategy.

Prior to working for Eyra, Mr. More worked for RJS and Alliance Technologies doing similar consulting work. Prior to that, he worked for the Clement Claibourne Corporation and its acquiring company, Mail Services Incorporated.  While at these companies, he was responsible for designing, developing and maintaining numerous Internet-facing Linux-based appliances.  Mr. More was also responsible for the security of the business’s network and maintaining the availability of the software as a service (SAAS) infrastructure.

Prior to working for CCC and MSI, Josh More earned his bachelor’s degree in Physics from Grinnell College while simultaneously working as a user consultant within the computer labs.  In this role, Mr. More was responsible for communicating problems to the system and network administrators and solutions to the student population.  He also tested new services for functionality and security issues.

Within the community, Mr. More is active within the SANS and GIAC organizations, both through the security community mailing lists and in writing and reviewing test questions for certification exams.  Mr. More has held a leadership role within Iowa Infragard, a joint partnership between the FBI and local businesses.  Mr. More has also held leadership positions within the Central Iowa Area Linux Users Group and the Virtualization User Group — both of which connect technologies of varying skill levels with one another to share ideas and solve problems.  He is a member of Agile Iowa and the local ISSA chapter.  He holds the CISSP, GIAC-GSLC Gold and GIAC-GCIH Gold certifications, among others.  He has written two books and co-written two others:

• UTM Security with Fortinet: Mastering FortiOS (co-authored)
• Assessing Vendors: A Hands-On Guide to Assessing Infosec and IT Vendors
• Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
• Breaking In to Information Security: Crafting a Custom Career Path to Get the Job You Really Want (co-authored)

Mr. More was born and raised in the Midwest and currently resides in the Minneapolis area.