tssci security is part of the Security Bloggers Network, and our team consists of Marcin Wielgoszewski and Andre Gironda. Team TSSCI has a diverse background in computer security and security related topics that span several years working in many different environments of varying criticality. Our research delves into web application security, server and infrastructure virtualization, cloud computing, trusted systems, and software security and assurance.

TSSCI stands for Top Secret/Sensitive Compartmentalized Information, a security clearance used in the defense and intelligence fields. An SCI clearance differs from a regular “top secret” or “secret” clearance in that SCI requires an explicit need-to-know to classified intelligence information concerning or derived from sensitive sources, methods, or analytical processes.

Contact Us

Marcin Wielgoszewski

Marcin graduated from the University of Advancing Technology in Tempe, AZ with a Bachelor’s Degree in Network Security. He is from Plainville, CT and is an OWASP contributor, evangelist, and deputy chairman of the Special Projects committee for the NY/NJ Metro OWASP chapter. He obtained the OPST certification (#A17049) in September 2008. Currently, Marcin works as a security consultant for Gotham Digital Science in New York City.

Contact Marcin (PGP Key: B0D446C3)
Fingerprint: F841 AE39 1E61 6D81 F42B C61E DD4E E185 B0D4 46C3

Marcin Wielgoszewski’s LinkedIn Profile

Andre Gironda

Andre Gironda’s primary interests revolve around risk management including risk analysis, communication, response planning, and governance. While not certified in any IT, audit, or security certification, he provides expertise in the areas of information security management metrics (8 years), risk/vulnerability assessments (12 years), DR&BC (11 years), software assurance (3 years), and network security (17 years). A generalist by nature, his analyst focus caters to the web application security and virtual infrastructure security product/service market spaces. Through his book and framework reviews, he also provides guidance on information/software assurance practices, as well as risk management and information security plans.

Andre currently works for a top-tier security consulting firm providing IT security services to the Fortune 500 and global financial institutions as well as U.S. and foreign governments. Previous to his current position, Andre held a number of payment application security positions in addition to working for the largest online auction website. He is currently a leader for the Open Web Application Security Project (OWASP), where he co-produces the global OWASP Podcast. He has spoken on application security at conferences including Toorcon and Shmoocon, as well as global organizations including training providers, e-commerce, ISPs, network vendors, and big financial companies. He is currently living in the Capital Hill area of Seattle.

Subscribe to tssci security

by Email
Entries RSS feed
Comments RSS feed

Disclaimer

The information in this weblog is provided “AS IS” with no warranties, and confers no rights.

This weblog is solely the authors’ opinion, and does not represent the thoughts, intentions, plans or strategies of the author’s current employer and/or any previous employers.

Feel free to challenge me, disagree with me, or tell me I’m completely nuts in the comments section of each blog entry, but I reserve the right to delete any comment for any reason whatsoever (abusive, profane, rude, or anonymous comments) — so keep it polite, please.