Hello! 👋 I'm a Security Engineer focused on incident response, reverse engineering, and building practical security tooling.

I specialize in malware analysis, cloud security (AWS), and developing automation that helps teams detect and respond to threats faster.

🚀 Current Focus

• Building AI-assisted workflows for reverse engineering and malware analysis
• Developing security-focused automation and tooling
• Exploring agent-based systems for security research

🌱 Currently Leveling Up In

• C++ for low-level analysis and reverse engineering
• Advanced offensive security techniques
• Detection engineering and threat hunting
• Applying AI to reverse engineering workflows
• Bug bounty research and vulnerability discovery

🛠️ Notable Projects

• Assisted Log Enabler for AWS
  Automated enablement of critical AWS logging (CloudTrail, VPC Flow Logs, Route53, S3) with secure configurations.
  Helps organizations quickly establish visibility for incident response and threat detection.

• AWS CloudSaga
  Framework for building security-focused scenarios and simulations in AWS environments.

• Reverse Engineering Skills
  Structured skill-based workflows for malware analysis using AI agents, focused on reproducibility and evidence-based outputs.

🤝 Open Source Contributions

• OpenClaw — openclaw/openclaw#22325
  Improved attachment parsing safety by preventing potential memory exhaustion during base64 decoding of large inline payloads.

• Prowler — prowler-cloud/prowler#824
  Contributed enhancements to cloud security auditing workflows for AWS environments.

✍️ Writing & Research

• https://www.joshuamckiddy.com
• Topics:
  • AI-assisted reverse engineering
  • Malware analysis workflows
  • Practical security research

🧠 Approach

• Focus on practical, reproducible security workflows
• Analyst-in-the-loop over full automation
• Evidence-based outputs (no hallucinations)
• Build tools that are usable in real environments