Offensive security · Adversary simulation · Immersive art

FuzzyNop

Josh Schwartz — red teamer, social engineer, and professional bogeyman. A computer who knows how to computer. Builder of corporate red teams by day; Fuzzy of The Fuzzy Place by night. One stop for all of it.

@fuzzynop red team social engineering malware & implants offensive psychology the decks
// About

Break it to understand it

It started with cheating at video games — bending a system's rules to see how it really works underneath. That instinct became a career spent on the attacker's side of the glass: building and leading red teams inside some of the largest companies on the internet.

The through-line of the work: the most interesting attack surface is people. Talks and trainings across the global conference circuit on red teaming, adversary simulation, behavioral security, and offensive psychology at scale — how organizations actually get compromised, and how to build cultures that don't.

// The marks

Six marks, one operator

The whole story told in glyphs — every one drawn from the record, and every one a door. Tap a mark to go deeper: my own talks and tools where they exist, the canonical source where they don't.

// Career

The record

2013 —

The conference circuit

A decade-plus of talks and trainings on red teaming, social engineering, and adversary simulation — DEF CON, DerbyCon, BruCON, NolaCon, HushCon, SXSW, RSAC.

source: InfoconDB talk archive ↗
Salesforce

Red Team Lead

Led the internal red team conducting high-impact offensive security engagements against one of the world's largest SaaS platforms.

source: QCon SF 2016 speaker bio ↗
Verizon Media / Yahoo

Director, Offensive Security

Oversaw offensive security, product security engineering, and security engagement functions across the Verizon Media → Yahoo estate.

source: RSAC expert bio ↗ Security Conversations podcast ↗
Now

Independent consultant

Full-spectrum red team and adversary emulation engagements, plus training on social engineering and behavioral security. Authorized targets only — that's the whole point.

// Selected talks

Stage time

// Sound

Behind the decks

Same wiring, different output. Fuzzy plays long, textural sets at the immersive-art parties he throws — after-hours music for the people who stay late.

Fuzzy — LIVE @ The Fuzzy Place · 1.5-hour set

Sets and originals live across the usual places:

SC SoundCloud SP Spotify MC Mixcloud
// After hours

The Fuzzy Place

An immersive art space in San Francisco. Counter-surveillance as performance, games that follow you home, and a rotating cast of mimes, clowns, and hackers exploring what privacy means when everything watches back. Art and education — the same curiosity as the day job, pointed somewhere stranger.

immersive artARG / LARPcounter-surveillance as artsan francisco
visit: fuzzy.place ↗ join the crew: skool.com/the-fuzzy-place ↗
// The network

Crews & co-conspirators

My own crew, and allied outfits whose work I back. The bogeyman keeps good company.

// Contact

Find the operator