// defense by day, offense by night

Welcome to TheLeoSpace.

I'm Joshua Mitchum (most people call me Leo). By day, I hunt live threats as a SOC Analyst across multi-tenant environments. By night, I simulate the same attacks I defend against within my homelab. My passion for understanding how systems break started on the workbench, where I brought broken hardware back to life, and today I apply that same hands-on approach to both offensive and defensive security.

> I leverage AI to spin up environments in seconds, keeping my focus where it actually matters: real-world offensive and defensive operations.

Penetration Testing SOC Detection Engineering PNPT · PJPT · eJPT OSCP — in progress

01 About

My tech journey started on the workbench as a Junior Technician, doing hands-on hardware repairs and deep troubleshooting. Taking a device in its absolute worst, broken state and bringing it back to life for a client gave me a ground-level understanding of how systems work when everything goes wrong. Over time, I transitioned into a Senior Windows Technician role. My focus shifted from hardware teardowns to working directly with clients. I set up NAS backup systems, configured firewalls, and mentored junior technicians on the team. All the while, I was spending my spare hours studying and preparing for my true passion: cybersecurity.

That studying paid off with a SOC analyst role at a managed security provider, and it turned out triaging real alerts against real attackers was exactly the deep end I'd been chasing. But the more intrusions I investigated, the more I wanted to be on the other side of them. I didn't just want to read the logs an attacker left behind. I wanted to understand the decisions that led there. So I started building my own Active Directory attack labs on nights and weekends, chasing that same feeling I had back on the workbench: I don't stop until I actually understand something, not just until it works again.

  • 7+Years in IT overall
  • 10,000+Users managed across client environments
  • 2Certs in progress — OSCP & CRTP

02 Contact

Open to opportunities in offensive security and detection engineering.