Jacob Brozenick

Background

About Jacob Brozenick

17+ years experience as an IT professional, 10 years as an application developer specializing in Java enterprise applications, web application design, web service design. 7+ years experience in information security operating as an application development and design SME. Vulnerability Analysis Lab (VAL) team lead and the CJIS Security Analysis Team (CSAT) assistant lead for 3 years. Designing and implementing dynamic and static application security testing methodologies that work with agile development, CI/CD and cloud platform architectures like AWS. Has worked closely with the Department of State in the development of foreign investment strategies by advising and creating processes to deal with software and system architecture security. This work was related to Committee on Foreign Investment in the Unites States (CFIUS) cases and involved protecting US government interests when tied to large international corporations with foreign investment. Help to coordinated the establishment of static application security testing (SAST) for the FBI CJIS division. Work closely with development team leads, ISSOs, and the CSAT team to create a reliable process for working SAST and dynamic application security testing (DAST) into modern agile and DevOps conceptualized life cycles. Map FISMA and FEDRAMP policies to security testing findings to help systems fix vulnerabilities and meet strict requirements needed to acquire authority to operate.