YYEHOSHUA
Available for impact
GRC ENGINEER × CYBERSECURITY × BUILDER39.7392° N / 104.9903° W

Joshua, in Hebrew

GRC engineer building secure, auditable systems that turn complex risk into decisive action.

Credential 01CISSPCybersecurity leadership
Credentials 02 / 03ISO LEAD AUDITORISO 27001 + ISO 42001
Explore selected work
[ DIRECT CHANNELS ]02 OPEN
EMAIL:joshnotadev@gmail.comGITHUB:@korvuswraith
1,000+IDENTITIES PROVISIONED
3FOUNDATIONAL LABS
2SAAS PRODUCTS IN BUILD
—TOTAL VISITS

[ 01 / SELECTED WORK ]

Systems built. Problems decoded.

A portfolio spanning cloud detection, identity automation, security research, governance, and product.

01
NOWGOVERNANCE / SAAS

Korvus

Building a security-first SaaS platform at the intersection of governance, assurance, and intelligent workflows.

GRCAI GOVERNANCEPRODUCT
IN DEVELOPMENT
02
NOWFINTECH / SAAS

Kairos

Developing a fintech platform designed around clarity, trust, and responsible financial infrastructure.

FINTECHSAASRISK
IN DEVELOPMENT
03
2022THREAT DETECTION

Azure SIEM Attack Map

Created a cloud SIEM, integrated Azure telemetry, and wrote KQL detections to map the origin of live attacks.

AZUREKQLSIEMGEO-IP
COMPLETE
04
2022SECURITY RESEARCH

Phishing Capstone

Built a controlled social-engineering simulation to demonstrate credential-capture risk and the human layer of security.

SOCIAL ENGINEERINGAWARENESSLAB
COMPLETE
05
2022IDENTITY / AUTOMATION

Enterprise Active Directory Lab

Configured a Windows Server environment and automated more than 1,000 user accounts with PowerShell.

WINDOWS SERVERPOWERSHELLACTIVE DIRECTORY
COMPLETE

[ 02 / OPERATING SYSTEM ]

Risk understood. Controls engineered.

01

GRC engineering

Designing controls, evidence workflows, and governance systems that teams can actually operate.

02

Cloud security

Building detection workflows and investigating hostile activity across Azure environments.

03

Audit & assurance

Assessing controls through ISO 27001, ISO 42001, and industry practice.

04

Technical execution

Moving comfortably between KQL, PowerShell automation, identity, and infrastructure.

AZUREKQLPOWERSHELLSIEMACTIVE DIRECTORYISO 27001ISO 42001RISKAUDIT

[ 03 / CREDENTIAL VAULT ]

Knowledge, independently verified.

01

CISSP

Certified Information Systems Security Professional

ACTIVE
02

ISO 27001

Certified Lead Auditor · Certified Internal Auditor

AUDIT
03

ISO 42001

Certified Lead Auditor · AI Management Systems

AI / GRC
04

SSCP

ISC2 Systems Security Certified Practitioner

ACTIVE
05

CompTIA

Security+ · PenTest+ · Network+ · A+ · Project+

STACK
06

ITIL 4

AXELOS IT Service Management

ACTIVE