Joseph Roesch

About Joseph Roesch

Actively looking for the next cyber security analyst, information security engineer, digital forensics analyst, or penetration tester position. I am a principal cyber systems engineer with experience in security engineering and cyber project management. I am also a US Army veteran with a deployment to a combat area. My purpose today is to be of service to my fellow veterans and to be a defender in the cyber community.Professional Certifications:Comptia Security + CE (2021)Federal Acquisitions Certification for Contacting Officer’s Representative FAC-COR (2022)Federal Acquisitions Certification for Project/ Program Management FAC P/PM (2022)GIAC Certified Incident Handler GCIH, Studying for Certification, 2022Security and Managerial Skills: Security Management; Cloud Security; Web Application Security; Incident Response; Threat Intelligence; Risk Management; System Security Engineering; System Development Life Cycle (SDLC); Certification and Accreditation (C&A); Governance, Regulation, and Compliance (GRC); Network, Host, and Application Security; NIST Risk Management Framework (RMF); NIST Cyber Security Framework (CSF); Internet of Things/Operational Technology (IOT/OT); Open Source Intelligence (OSINT); Privacy; Vulnerability Management; Vulnerability Scanning and Penetration Testing; Vendor Management, Conference Speaking, Public Relations Technical Skills: Linux, Windows, MacOS, Web Application Firewall (WAF), Distributed Denial of Service (DDoS) Mitigation, Bot Detection and Mitigation, Content Delivery Network (CDN), Domain Name System (DNS), Transport Layer Security/Secure Sockets Layer (TLS/SSL), MySQL, Nessus, Foundstone, Nmap, Apache Web Server, Python, PHP, BASH, HTML, JavaScript, BurpSuite, Maltego

Experience

1. Principal Cyber Systems Engineer

   Northrop Grumman

   Apr 2023 — Present · Roy, UT, US

   Initialize, Plan, Develop, and Govern a Software Assurance Team to ensure the Sentinel program builds dependable, trustworthy, and resilient software.Implemented HTTPS and Kerberos SSO on a configured Red Hat Linux web application server.Managed and deployed static code analysis tools, including Coverity, Code Sonar, SonarQube, and Fortify, to evaluate and enhance the quality of supplier-supplied code.Implement and review requirement decomposition, derivation, and flow down Implement and review traceability of requirements throughout a spec tree architecture Support the architecture and design of baked in cybersecurity requirements and protections Implement and review traceability of requirements to the design & its models Implement and review the application of cybersecurity profile stereotypes to a Model Based System Engineering (MBSE) Architecture Provide cybersecurity system engineering implementation guidance and oversight to technical teams/implementers Review and Assess stakeholder security objectives, protection needs and concerns, security requirements, and associated verification/validation methods Implement, review and assess cybersecurity system requirements verification/validation methods Identify and/or assess vulnerabilities and susceptibility to life cycle disruptions, hazards, and threats Provide security considerations to inform systems engineering efforts with the objective to reduce errors, flaws, and weakness that may constitute security vulnerability leading to unacceptable asset loss and consequences Author, support and maintain cybersecurity program documentation & RMF package documentation: Cybersecurity Strategies, System Security Plans, Continuous Monitoring Plans, Risk Assessment Report, Security Control Traceability Matrix, Plan Of Actions & Milestones, etc.

Education

• Pierce College

  Business Administration and Management, General

  2012 — 2013

• George Mason University

  Bachelor of Science - BS, Information Technology

  2018 — 2020

• Northern Virginia Community College

  Certificate of Web Development, Information Technology

  2015 — 2015

• Centreville High school

  High School Diploma, AP English 10, Algebra 1 hnrs, Algebra 2 hnrs, Geometry hnrs, Biology hrns,

  2006 — 2009

• Northern Virginia Community College

  Associate of Science (A.S.), Information Technology

  2015 — 2017

Skills

• Time Management
• Solid Computer Skills
• Problem Solving
• Communication
• Teamwork
• Management
• Discipline