Josh Liburdi
Principal Engineer, Security Operations
San Francisco Bay Area United States
Summary
🤩
Rockstar🎓
Top SchoolJosh Liburdi is a Principal Engineer in Security Operations with 12+ years of experience building detection, response, and threat-hunting systems at companies like Brex, Target, CrowdStrike, and Splunk. He architects scalable, data-driven detection pipelines and observability tooling—authoring Substation and leading development of Strelka—processing billions of events and hundreds of millions of files daily. Josh blends hands-on engineering (serverless pipelines, Detection-as-Code, SOAR integrations) with incident command experience and cross-functional leadership that drove rapid FIDO2 adoption and enterprise RBAC/JIT rollouts. An active open-source contributor, his Zeek work and contributions to high-scale file-analysis projects reflect deep protocol and metadata expertise. He presents regularly at security conferences and co-authored industry books, signaling both practical impact and thought leadership in applied threat detection.
12 years of coding experience
9 years of employment as a software developer
Associate of Science (A.S.) Computer Systems Security, Associate of Science (A.S.) Computer Systems Security at Washtenaw Community CollegeBachelor of Science (B.S.) Information Assurance Management, Bachelor of Science (B.S.) Information Assurance Management at Eastern Michigan University
Github Skills (28)
python10
log-analysis10
analyse10
extraction10
zeek10
metadata10
filetype10
detectors10
network-monitoring10
file-parsing10
text-analysis10
file-format10
security10
bro10
detector10
Programming languages (6)
Github contributions (5)
target/strelka
Sep 2018 - Aug 2019
Real-time, container-based file scanning at enterprise scale
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:6 releases, 105 commits, 151 PRs in 11 months
Contributions summary:Josh primarily contributed to the project by developing and improving the security and file scanning capabilities of the Strelka system. The commits involved adding new scanners, such as ScanStrings, ScanPhp, ScanIni, and Zlib, demonstrating the user's focus on expanding the file type support. Further contributions included bug fixes and optimizations, particularly in the ScanZip and ScanPdf scanners, ensuring the robustness and accuracy of file processing. The user also refactored existing components for improved performance and maintainability.
golangcontainersreal-timeyarafile-based
lmco/laikaboss
Aug 2015 - Mar 2016
Laika BOSS: Object Scanning System
Role in this project:Back-end Developer
Back-end DeveloperContributions:14 commits, 11 PRs, 14 comments in 6 months
Contributions summary:Josh primarily contributed to the Laika BOSS project by adding and modifying modules related to file analysis and metadata extraction. They implemented a module to extract the imphash from PE files, added functionality to log JSON results, and created modules to parse manifest and class files. Furthermore, they updated existing modules and configuration files, and renamed modules.
javabossscanninglaika
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.