Joey Gibson

Java, Python, Kotlin, Rust, Ruby, C, Smalltalk, Lisp, Go
github.com/joeygibson • linkedin.com/in/joeygibson

Profile

Professional software developer since 1990, with roots in programming dating back to 1983. I’ve consistently stayed current across multiple programming languages and platforms throughout my career. In 2002, I co-authored Ant Developers Handbook and was an active conference speaker for several years. My work includes contributions to major open source projects like Ruby on Rails and Docker, as well as commercial software on the iOS App Store. I specialize in rapidly assimilating new technologies and applying them to solve practical problems.

Open Source Contributions

Commercial Products

Experience

2013 - present

Cisco Systems, Inc. – Software Engineering Technical Leader

• Key contributor to XDR (Extended Detection and Response) cloud-native data ingestion platform, processing security events from 10+ enterprise security products including CrowdStrike, Microsoft Defender, Cisco Secure Network Analytics (StealthWatch), and Cisco Secure Cloud Analytics.
• Delivered substantial contributions with 400+ commits addressing 240+ engineering tickets since 2023, including critical bug fixes, performance optimizations (large file memory management), and data quality improvements.
• Contributed to a codebase of 60+ AWS Lambda functions in Python 3.12 for event-driven data transformation pipelines using S3, SNS, SQS, and EventBridge, with comprehensive documentation and monitoring.
• Designed and implemented OCSF (Open Cybersecurity Schema Framework) 1.0 and 1.4 compliant transformations for multiple security data sources, ensuring interoperability and standardization across the security ecosystem.
• Built enrichment system that adds contextual information from device insights, reputation services, and threat intelligence to security findings.
• Designed and built a per-tenant detection-tuning rules system, including global rule propagation, on-onboarding rule seeding, and a streaming rule-evaluation engine integrated into the enrichment pipeline.
• Drove significant performance and reliability work in the enrichment layer: eliminated out-of-memory failures by converting batch processing to streaming, added caching and bulk-loading of rule and annotation data, and improved resilience to upstream API rate limiting and token-refresh failures.
• Built new cloud telemetry ingestion pipelines (including a Google Cloud log ingestion pipeline) and expanded OCSF 1.4 coverage for network alerts, observations, and findings.
• Developed Databricks Delta Live Tables (DLT) data-product pipelines that normalize cloud network flow telemetry (e.g., GCP VPC Flow Logs) into OCSF 1.4 Network Activity, including CI/deploy automation and schema conventions.
• Integrated AI assistants (Anthropic’s Claude, via Claude Code and agentic coding tooling) into daily development workflow for code generation, refactoring, test authoring, code review, and documentation, materially increasing delivery velocity while maintaining code quality standards.
• Technical mentor and code-reviewer for multiple teams.
• See the full resume for earlier Cisco projects and complete work history.

2008 - 2013

GlobalScholar – Senior Architect

• Specification, architecture, and development in Java and Flex across both front and back of the system.
• Database schema definition and migration scripts.
• Implemented and managed build process and CI server. Our build tool was Maven,. I implemented the Maven release-plugin’s features in Ant, which gave us the flexibility that Maven didn’t provide.
• Filled in for department director in his absence.
• Technical mentor and code-reviewer for other team members.

joey@joeygibson.com • 678-404-0954 • Georgia, USA
Short resume • Full resume