Joshua Bartolomie Email & Phone Number

Reporting directly to CEO, serve as the principal lead responsible for the overall management and evolution of 80+ staff throughout the Cofense Phishing Defense Center managed service offering, the Cofense Intelligence product, and the Cofense R&D (Cofense Labs) team. As a member of the Cofense executive team, this dynamic role was focused on defining and shaping the overall strategic roadmap for these functional units and ensuring the relevance of all related operational and engineering priorities. Worked closely with internal and external stakeholders to assess and define collaboration, requirements, gap identification, and cross-pollination or diverse product initiatives and opportunities. Relied upon to maintain up-to-date knowledge and insight to act as a SME throughout the organization in the areas of cyber security operations, architecture, and incident/threat response, global threat landscape, emerging threats, phishing tactics, security compliance standard, and related technologies and implementations.

In Q3 2019, I assumed leadership of the Cofense Intelligence product and worked closely with the product leader to establish a dynamic and agile roadmap with a focus on optimizing resources, standardizing the product offering, and working to improve market share and overall sales. Over the course of an 18-month period of focused systems design engineering, staff engagements, and process streamlining the team established a full proprietary data sourcing model, design and implement a utilization and metrics architecture, and operationalize multiple initiatives that resulted in a threat intelligence processing and publishing volume increase of greater than 750%. Over the same period, was successful in reducing backend infrastructure costs by ~60% and increased overall products ACV by over 120%.

Reported directly to the Cofense CTO and managed a dedicated team of Principal threat researchers/engineers and focused on building out an internal innovation space that enabled rapid and automated threat correlation, identification, and related insights. Additionally, worked closely with business leaders throughout the organization to identify opportunities for research, SME guidance, process/product prototype related activities. Continuously work to leverage my knowledge and subject matter expertise to forecast future security and customer requirements, gaps, and opportunities and facilitate the resulting research, design, prototype development, and overall risk/reward assessments

Remote

Served as a key member of the executive security team and provided thought leadership, strategic guidance, innovative roadmaps, and operational excellence for Cognizant’s global cyber security program. Efficiently and effectively collaborated in a highly matrixed organization and provided security operations, architecture, and response leadership to multiple globally diverse teams on tactical and strategic projects that encompassed all aspects of corporate cyber security operations, architecture, and engineering. Managed a team of over 80+ employees within multiple countries that encompassed all aspects of cyber security operations, engineering, and leadership to include areas such as: security operations, DLP management, emerging threat intelligence management, incident response management, forensic requirements, email protections, security infrastructure management, operational and strategic security innovation, security metrics management, and executive/board reporting and communications.

Reporting directly to the Exelis CISO, designed and established a robust and pervasive companywide security architecture and secure SDLC program throughout the organization. Built dedicated teams, worked with business unit stakeholders to design and implement multiple initiatives that ensured minimized shadow IT, designed dynamic architecture designs and devops security processes to ensure risk of exploitation and/or weaponization of corporate applications and infrastructure was minimized and/or eliminated. Designed and implemented models for security architecture audits, risk quantification, assessment models, and related cost/impact projections. Provided regular briefings and debriefs to executive management, including CISO, CIO, CTO, CEO, and the Board of Directors.

Reporting directly to the ITT CISO, was responsible for all aspects of Cyber Security Operations, Incident Response, Threat Intelligence, and Risk Management for an Aerospace and Defense company with annual sales exceeding $4B and over 20,000 employees. Established the initial Cybersecurity Risk Management and Compliance team and associated standards/processes within the organization. Continued to advance the security operations team and worked with business leaders and stakeholders to streamline security investigations and minimize interruptions. Implemented the organization’s first Cybersecurity benchmark and metrics program and worked closely with technology and business partners to establish standards of operation, security control, and compliance requirements. Managed multiple direct and matrix teams of security practitioners and teams across 15+ countries. Through innovative optimization, reduced average cyber incident response time by 36%. Focused on iterative innovation and established a cyber incident response team and capability that was a SC Magazine 2013 Information Security Team of the Year finalist and was categorized by several independent third-party auditors as being “world class”.When ITT Corporation split into three new entities; worked as the primary Operational Security SME and worked closely with executives to ensure they maintained robust security controls, visibility, monitoring, and operational staff. Provided managed security services for all three organizations for a period of 3-6 months while working with them to implement new security controls and related operations. Provided regular briefings and debriefs to executive management, including CISO, CIO, CTO, CEO, and the Board of Directors across all three organizations.

Mr. Bartolomie is an adjunct instructor with the Criminal Justice department at Utica College. He hashelped develop and teaches a variety of Graduate level courses encompassing the topics: Informationand Communication Security, Penetration Testing, Network Security, Advanced Topics in Cyber security, Computer Forensics Investigations, and Advanced Topics in Cyber Investigations.

Rome, Ny

Established the first Security Operations Center for ITT Corporation, a conglomerate commercial and Aerospace and Defense organization with over $8B in annual sales and 30,000+ employees. Was authorized by the CIO to initiate a ‘ground up’ design and strategic vision for a full scope SOC. Designed and operationalized full network and endpoint monitoring, security operations, security architecture, analyst processes and procedures, a robust incident response team and related standards, policies, and procedures. Established a robust and global security operations and incident response team and corporate wide security model based on NIST 800-53 as well as ISO 2700x standards. Core activities and responsibilities of this position included:• Ground up design and implementation of the global IT Security Operations Center. This included the overall architecture, visibility, SLAs, policies and procedures. This included the overall management and strategic vision of the SOC, technology and architecture acquisition and implementation, SLA’s enactment, creation of applicable policies and procedures, and ensuring continued business alignment.• Global coordination and collaboration of information security efforts, incident response management, strategic technology and security control acquisition and integration, full scale global threat awareness, detection, containment/triage, and remediation. • Management of highly trained and skilled cyber security professionals within multiple aspects and disciplines, to include: proactive threat analysis and protection, security monitoring, network protection and controls management, intrusion detection, incident response management, vulnerability and risk assessments, live and post mortem forensic analysis, security awareness training, penetration testing, law enforcement interaction, malware analysis and reverse engineering.

Mr. Bartolomie managed the Cyber Information Management, Processing and Exploitation (CIMPE) Department’s web portal and various training activities. A primary focus of his position was identifying current IT security and forensics needs and technology for future research, evaluation, and transition. He was also a member of the ITT Enterprise Protection Planning (EPP) Study team and performed multiple gap analysis studies on various aspects of the ITT infrastructure and working model. Additionally, he was a member of the ITT Security Administration team and assisted in the analysis, assessment, and recommended implementations for global corporate security requirements, processes, procedures, and training for ITT.

Mr. Bartolomie served as a lead member for the Cyber Science Laboratory (CSL), which was a program of the National Institute of Justice. He provided technical and training assistance in the form of written analyses of security and forensic software/hardware, as well as demonstrations of cyber security processes and concepts. In addition, Mr. Bartolomie designed and managed the Cyber Information Management, Processing and Exploitation Department’s (CIMPE) web portal and various training activities, as well as a multitude of forensic and security technology testing and evaluation initiatives. A primary focus of his position was in performing cybercrime and security needs assessments and identifying technology for future research, training, evaluation, and transition for federal, state, and local law enforcement staff. Areas of focus consisted of a multitude of cyber security related topics including: cybercrime modes and methods, digital forensic triage, network forensics, evidence management, hacker methodologies, and software exploitation. Through this work, Mr. Bartolomie has provided over 2000 hours of training to thousands of individuals and has presented at dozens of law enforcement, U.S. Government, and cyber security related conferences such as the: DoD Cybercrime Conference, United States Secret Service Miami ECTF Prosecutors Seminar, and Organization of American States Latin American Cybersecurity Training Initiative; and has published multiple cyber security related articles through the NLECTC Techbeat Magazine and other venues.

Mr. Bartolomie was a Lead Computer Technician located at Air Force Research Laboratory (AFRL) located at Rome Research Site (RRS) in Rome, NY. The focus of this position was to maintain current AFMC security and operational standards on all computers and network equipment under his and his staff’s control.

Msia, Information Assurance

Graduated Cum Laude

B.S., Digital And Computer Forensics

A.S., Criminal Justice