Josh Lemon is the chief of digital forensics and incident response at SoteriaSec, with over two decades of experience handling complex security incidents for multinational organisations, government agencies, and law enforcement. He is regularly called upon to provide expert witness testimony for legal cases involving breaches and incident response. He is also a co-author of SANS Institute’s “Enterprise Cloud Forensics” and “DFIR NetWars” courses and teaches “Advanced Incident Response and Threat Hunting” and “Advanced Network Forensics” as a Principal Instructor.
Previously, Josh held senior roles, including director of global managed detection and response (MDR) for Uptycs, where he helped to secure some of the largest international brands from cyberattacks. Managing director at Ankura, leading APAC digital forensics and incident response services. At Salesforce, he directed the strategic response unit, pioneering innovative approaches to incident response at scale. He has also managed CSIRT operations for the Commonwealth Bank of Australia and led cybersecurity services for BAE Systems in the Asia Pacific region.