Designing and Launching Secure Software Development Degree Apprenticeships Partnering with Historically Black Colleges and Universities – Panel Session

Designing and Launching Secure Software Development Degree Apprenticeships Partnering with Historically Black Colleges and Universities – Panel Session

The May 2022 tech talk was presented by Diana Elliott, Girish Seshagiri, and Nikunja Swain

About the Session

Currently, in the U.S. over one million software developer positions and 600,000 cybersecurity occupations are unfilled due to the lack of available skilled job seekers. At the same time, the percentage of women, minorities and veterans in technology professions continues to be low. In this panel discussion, we describe how a consortium of South Carolina Historically Black Colleges and Universities (HBCUs) is partnering with SC employers to design and launch IT and cybersecurity degree apprenticeship cohorts in fall 2022. The panelists will provide a status update of the exemplar government/industry/academic collaboration which will result in career pathways to technology jobs for cyber security and computer science graduates of HBCUs. The panelists will discuss the requirements of DOL Registered Apprenticeship Program which is a high-quality vocational training model with standard work process including 2,000 hours of on-the-job training and 61 academic credit hours. The panelists will present how the HBCU consortium colleges mapped cybersecurity and computer science degree curricula to National Initiative Cybersecurity Education (NICE) Framework competencies for developing software which is secure from cyber-attacks.

About the Presenters

Diana Elliott is a senior fellow in the Center on Labor, Human Services, and Population at the Urban Institute. Her work focuses on families’ financial security and economic mobility and the programs and policies that support them, including apprenticeships. Elliott is the director of several apprenticeship projects at Urban, including the Apprenticeship Expansion and Modernization Fund, which launched over 1500 apprentices into tech occupations. Prior to Urban, Elliott was a research manager at the Pew Charitable Trusts and a family demographer at the US Census Bureau. Elliott holds a PhD in sociology from the University of Maryland, College Park.

Girish Seshagiri Founder/CEO of Nonprofit Apprenticeship Implementation Solutions, Inc is an early adopter of the apprenticeship dual model. Under his leadership, the Community Initiative Center of Excellence for Secure Software (CICESS) was launched in Peoria, Illinois in 2015. CICESS received the 2018 Innovation in Cybersecurity Education Award given by the National Cyberwatch Center. Girish is currently focused on government/industry/academic collaboration partnering with Historically Black Colleges and Universities to design and launch IT and Cybersecurity degree apprenticeship cohorts. Girish is the immediate past co-chair of the NICE Apprenticeship Working Group. Girish has an MBA from Michigan State University.

Nikunja Swain is a professor, department chair, and executive director of center of excellence in cybersecurity at South Carolina State University. Dr. Swain has over 35 years of college level teaching experience and he is a registered professional engineer in South Carolina. Dr. Swain has over 70 conference/journal publications, and number of grants from NSF, DOE, USDA/NIFA, DOD, and others. Dr. Swain is a life senior member of IEEE, a professional member of ACM, a member of SIGITE, and ASEE.

Changing the Engines without Landing the Plane

Changing the Engines without Landing the Plane

The January 2022 tech talk was presented by Robert Bentall

Abstract:

Technical debt is like adding useless ballast to a speeding jet. It just slows everything down. Yet, in most environments, technical debt reduction, infrastructure upgrades, and process improvement usually take second place to other, “more important” stuff. But without these enhancements, productivity will drop and projects will grind to a halt. 

This talk will cover the most important lessons I have learned working on projects in a range of different industry sectors and organizations.

About the Presenter 

Robert Bentall is Principal Software Engineer at Martin-Baker Aircraft Company, where he leads the Software Team. Prior to this, he worked for Schlumberger Oilfield UK PLC as a software engineer.

SAFe vs. Reality: How Will We Solve the Conflict?

SAFe vs. Reality: How Will We Solve the Conflict?

The June 2021 tech talk was presented by Francisco Javier Ruvalcaba Moya

Abstract:

SAFe is the new standard in the software industry; you must code faster.” “You already implemented SAFe, so why are you delaying the release?” Multiple questions appear when SAFe is going to be implemented, but how do we make people understand that SAFe is not a cure-all? Is it clear to all that SAFe is just a tool, and that what is important is how to apply it? We’ll explore a few stories about this issue and give multiple examples on how to improve with SAFe support.

About the Presenter 

Francisco Ruvalcaba Moya  Francisco holds a Master’s degree in Intelligent Multimedia Systems. He is lead of staff software at Continental Automotive Guadalajara with 11+ years of experience in ID devices and car access systems; he is also a Scrum Master, certified in SAFe 5.0 and formerly SW PO in SAFe 4.6.

How Owning My Data Leveled Up My Life

How Owning My Data Leveled Up My Life

Abstract:

People are often pressured to deliver a plan in line with schedules created by inaccurate estimates. As we know, this leads to products that under-deliver and are over-budget. Applying solid methodologies, such as Personal and Team Software Process℠, help to give realistic deadlines that people can commit to. But what if we could use these processes and this data for more.

This talk explores how learning to own my data and performance has helped me to improve both myself and those around me, not only in my professional life, but personal life as well.

About the Presenter 

Alex Powell

Alex Powell studied Integrated Mechanical and Electrical Engineering at the University of Bath (UK), where he achieved a First Class with Honors. He is now is a software engineer who is committed to delivery of high-quality systems in an efficient time scale. He currently works for Martin-Baker, a company which is dedicated to creating and advancing the field of escape systems for military aircrafts. He is a member of the IET and is striving towards his chartership.

In his spare time, Alex trains and competes in a number of sports. His main passion is karate and he captains the JKS Wales squad. When not competing, Alex enjoys hiking, traveling, or any form of adventure.

Away from sports, Alex has a keen interest in drones and cyber security. His crowning achievement was managing the team which received the top three awards from the IMechE Unmanned Autonomous Systems challenge. Their aircraft still hangs in their university foyer to this day.

℠ Personal Software Process, PSP, Team Software Process, and TSP are service marks of Carnegie Mellon University. The Software Excellence Alliance is not affiliated with Carnegie Mellon University.

Putting the “Sec” in DevSecOps… Quantified

Putting the “Sec” in DevSecOps… Quantified

The March 2021 tech talk was presented by Larry Maccherone

Abstract:

A guiding principle of Comcast Cybersecurity is that we are no longer gatekeepers, but rather coaches and toolsmiths. Another, is that we favor building security in over bolting it on. Together, what this means is that the ownership of the problem of the security of the products shifts primarily to the teams that are developing those products. Further, the role of the cybersecurity group at Comcast shifts to supporting those engineering teams by developing and providing self-service tools that prevent problems or give automated feedback. We then provide coaching to help teams understand how best to use those tools and whatever other DevSecOps practices they need to adopt.

This talk dives deeper into what the above paragraph means and then presents original research quantifying the impact that various DevSecOps practices have on security risk outcomes so you can make an informed decision what to focus on first.

About the Presenter 

Larry Maccherone is an industry-recognized thought leader on Lean/Agile, Analytics, and DevSecOps. He currently leads the DevSecOps transformation at Comcast as a Distinguished Engineer. Previously, Larry led the Insights product line at Rally Software where he published the largest ever study correlating development team practices with performance. Before Rally, Larry worked at Carnegie Mellon with the Software Engineering Institute (SEI) and CyLab for seven years conducting research on cybersecurity and software engineering.

Contact Larry on his LinkedIn page: https://www.linkedin.com/in/LarryMaccherone