Joseph Dickinson Email & Phone Number

Collingswood, Nj, Us

Madison, Wi, Us

• Subject Matter Expert (SME) to the design, development, and maintenance of Snyk SCA, Snyk Code SAST, and Prisma Cloud Compute for Containers within Gitlab includes. I programmed these includes to drive secure software development in American Family’s 5 operating companies. ◦ This include provided quick, and efficient pipeline scanning for a plethora of languages and frameworks including: Python, Javascript, Perl, Java, C#.NET scanning thousands of applications using BASH and Python3. ◦ Wrote extensive documentation, and diagrams to be consumed by a technical and non technical audience. ◦ Gave several company-wide presentations outlining the invocation of this tool within Gitlab pipelines.• Led developers through STRIDE threat modeling, vulnerability analysis/remediation, manual source code review.• Performed several internal penetration testing of AmFam applications - varying size web applications, and services identifying critical vulnerabilities that were quickly remediated after read-out calls.(American Family, continued)• Led company-wide incident response efforts to quickly identify and remediate critical vulnerabilities spanning hundreds of applications.Additionally, and more recently for this role• Led Vulnerability Remediation Management - working with developers, and stakeholders.• Performed DAST scanning with Burp, and manual false positive identification to provide developers with only true positive findings for remediation.• Finally, as of August 2024 have additionally been focused on Cloud Container Security for the Enterprise, and contributing to rolling that out.

Sydney, Nsw, Au

• Led the introduction of SAST[Checkmarx, Synopsys Coverity, IBM Appscan] and Nessus into many phases of the secure, software development lifecycle. • Performed numerous internal Penetration Tests of 7 different Nuix Applications of both standalone and web-based applications. • Determined whether reported defects by SAST and DAST tools were true or false positives, and triaged security defects for remediation efforts. • Established effective business relationships with Project Managers, Project Owners, Development Teams, and C-Suite Management for effective vulnerability remediation. • Performed Threat modeling utilizing the STRIDE methodology during the design phase of the SDLC. • Performed manual source code review to determine vulnerability areas in the code bases, and then collaborated with developers and architects for proper remediation. • Evaluated numerous SAST, DAST and Penetration test tools for inclusion in Nuix's security program to better protect Nuix, and its clientele. • Wrote numerous penetration test reports and collaborated with C-Suite Executives to explain the overall risk to the business. • Created, and presented technical training to internal Nuix Software Development teams and Executive Leadership regarding vulnerability categories: OWASP TOP 10, OWASP API TOP 10, and SANS TOP25 software development vulnerabilities, occurring in Nuix applications. • Attested to preliminary safeguards in place regarding Application Security practices to achieve in use to obtain ISO 270001 certification for Nuix. • Collaborated with development teams to evaluate areas of vulnerability within a containerized development environment around the use of JWT Tokens for authentication within several applications.

Philadelphia, Pennsylvannia, Us

• Evaluated, configured, tested, and deployed static and dynamic code analysis tools for system and code hardening efforts primarily around Sonarqube, and Nessus to harden the existing computer software. • Performed manual static code analysis of Java 1.8 code base to identify vulnerabilities • Developed tshark scripts in python to hunt for anomalous information in wireshark packet capture (pcap) files. • Led python development of situational awareness boundary defense tool to transact and monitor anomalous network traffic. • Developed sample exploits for buffer overflow and sql injection. • Led, and mentored a team of junior engineers to understand complex ship system diagrams, and underlying systems. • Created Network diagrams to outline complex network architectures. • Worked hand-and-hand with academic partners to develop network model endpoints to support defensive situational awareness tool mission needs. • Involved in writing and reviewing requirements for situational awareness tools used on shipboard systems pre and post deployment to production. • Assisted with installation and configuration of high-availability environment (HAVEN) • Performed lab creation, testing, and ship installation of defense, network-based tools to identify and remediation foreign actors on the network. • Performed comprehensive technical analyses of ship pcap data in the situation of a data breach. • Determined effectiveness of OS-level security for use in a production environment through comprehensive testing in a lab environment. • Evaluated COTS (Commercial Off The Shelf) NIDS (Network Intrusion Detection Systems) for suitability in projects.

Washington, Dc, Us

• Developed application utilizing Python 2.7, Django, and Docker. • Hardened and developed computer software developed in Ruby on Rails. • Developed scripts in PowerShell scripting language. • Served as lead of software security through guiding other developers and stakeholders. • Offered technical solutions to remediate security vulnerabilities identified in systems. • Performed tuning of queries, database models, and database configuration in a handful of relational and non-relational including: Mysql, Oracle, Postgresql, and Mongodb. • Wrote detailed technical documentation outlining weekly activities performed by project team written for a non-technical audience.

• Application development in Php 5 with Drupal 7. • Developed, and maintained Linux Apache Mysql Php(LAMP) application used by students to show various career pathway options. • Developed CLI Python script to semi* automatically update Drupal 7: Core, Modules, and backup Drupal installations (more below). • Installed, and configured new SSL Certificate utilizing SHA2 cryptography standards. • Complex system administration duties of Salesforce Non Profit Starter Edition implementation. • Responsive design using vanilla css3 selectors with media queries. • User Interface (UI) development of low* fi mockups for consultant team. • Contributed badge creation and validation definitions for Mozilla Open Badges workgroup. • Administered and configured Ubuntu 10 / Apache 2.2 webserver. • Documented complex technical matter for a business audience. • Created open-source application to manage Drupal Instances (see github below).

• Developed Software as a Service (SaaS) solution to identify web application vulnerabilities. • Configured infrastructure on AWS utilizing Nginx web server. • Configured Ubuntu 12.0.4 based EC2 server to house application. • Built application in Python 2.7 with Django 1.5.5 • Coordinated efforts with clients to test application

West Chester, Pennsylvania, Us

• Developed Java Controller Class to parse remote XML elements using Java DomParser. • Developed "Second Channel" stream messaging service using RTPU and Java. • Fine-tuned DB2 Sql Database queries that improved results of new enhancements. • Identified and resolved using java, numerous application security vulnerabilities on QVC.com spanning many areas of Sql Injection. • Resolved numerous business logic code defects affecting thousands of users on QVC.com. • Wrote a Javascript bookmarklet to identify current datacenter running QVC.com. • Increased efficiency and usability of QVC.com and related services for QVC customers. • Reduced under performing java code base to increase customer experience.

Philadelphia, Pa, Us

• Developed MS Info Path form to track and record monthly projects for departments. • Developed automated an existing system to sync database tables between development to production.

Audubon, Pa, Us

• Worked in team of eight develop and maintain C# Asp.net website. • Served as leader in explanations of technical requirements for QA testers. • Developed C# Asp.net web controls and forms to promote better usability. • Worked in SiteCore to write queries to modify multiple existing fields.

• Increased performance of P/L Sql Database Stored Procedures. • Developed a C++ CLI application to control remote server environment availability. • Developed a Php and Linux based web application to view decommissioned war ships. • Performed ongoing inventory of new computer workstation hardware.

Philadelphia, Pennsylvania, Us

• Diagnosed networking issues with student computers • Repaired faculty computers

* Design logos for websites and various mediums.* Basic flash animations

Bachelor'S Degree, Information Systems, Minor In Business

Bachelors Of Science, Computer Information Systems