Joseph Barcia is a Senior Security Consultant at Bishop Fox, focused on cloud security research and offensive security tooling. As the Cloud Service Line Lead in consulting, he helped shape the methodology, tooling, and growth of Bishop Fox's cloud penetration testing team, while mentoring new consultants along the way. He contributed to several Bishop Fox open source security tools including CloudFox, an offensive cloud security enumeration tool supporting AWS, Azure, and GCP; CloudFoxable and IAM-Vulnerable, vulnerable-by-design AWS environments for hands-on cloud pentesting training; and FoxMapper, a privilege escalation path mapping tool that builds on NCC Group's Principal Mapper (PMapper) for identifying IAM attack paths across AWS and GCP.

Joseph came up through systems administration before moving into offensive security consulting. Years spent building and managing infrastructure gave him a practical understanding of the misconfigurations and operational gaps that lead to real security risk, and that perspective carries over into the tools he works on.

Joseph holds his OSCP, OSWP, and eCPPT certifications, and earned a Master of Science with Distinction from the New York Institute of Technology.