SUMMARY:

IT security professional responsible for developing, administering and evaluating information security standards. Extensive hands on experience in security risk assessment, compliance, and IT governance. Successfully designed and implemented threat detection systems to protect business critical applications and data. Endpoint security and integration with DLP, infrastructure security, firewall systems, computer and network forensics. Incident response and discovery, using Tripwire and other event management systems. Performed network security scans for NERC, PCI, SOX and HIPAA requirements

PROFESSIONAL EXPERIENCE:

Confidential

Security Engineer, Sterling, VA

Responsibilities:

• Implemented various cyber security solutions: Confidential ASA firewall management, DMZ, AnyConnect and IPSEC tunnels. Managed and designed intrusion detection systems and network architecture.
• Designed cyber security solutions for government and corporate clients.
• Procured enterprise network monitoring solutions using VMware 6.5 and the Alien vault SIEM appliance. Gained experience with network security tools such as Wireshark, Nessus, and Security Onion.
• Exposure to Next Generation technologies such as Carbon Black, Cylance and OpenDNS.
• Evaluated and recommended security updates to meet compliance standards.

Confidential

Network Engineer, Lanham, MD

Responsibilities:

• Monitored compliance risks, and remediated software vulnerabilities for various clients. PCI - DSS Gap & readiness security analysis.
• Assisted clients with compliance assessments, and network security scans. Responsible for log collection, correlation, reviews, archival, retention and monitoring of automated alerts for IPS/IDS devices.
• Knowledge of various corporate security rules, legal and regulatory obligations such as PCI, SOX or similar standards.
• Microsoft SQL 2014 implementation, management and design.
• Evaluated and recommended security updates to meet compliance standards.
• Monitored security systems including firewalls, virus protection systems, Web/Email filters, activity logging and reporting systems, and network and host-based intrusion prevention systems

Confidential

Network Engineer, Washington, DC

Responsibilities:

• Configuration and management of Confidential firewalls, routers and switches.
• Deployed cyber security solutions using firewall policies, web filters, and Alert Logic IPS.
• Extensive experience in security governance programs, risk management, and remediation.
• Implemented Next Generation cyber security solutions to meet regulatory requirements: PCI-DSS, HIPAA, HITECH, SOX and NIST.
• Conducted threat readiness and Incident response counter measures.
• Operational security management included network monitoring, Data loss prevention, firewalls, application security and vulnerabilities mitigation.
• Designed VMware 6.5 environment and installed SSL certifications for Exchange 2013.
• Managed data encryption, snapshots, and replication services using Nimble SAN storage. Designed and supported an MPLS network with 50 remote locations.

Confidential

Information Security Engineer, Bethesda, MD

Responsibilities:

• Led the design, implementation and development of information security governance policies, strategies, and compliance procedures.
• Managed Tripwire polices and Windows updates.
• Completed and responded to internal and external audits of information systems. Analyzed and presented key compliance metrics and performed continuous monitoring of Information Security programs to ensure compliance with objectives, policies and procedures.
• Performed external/internal penetration testing for clients conducting attacks on the organization's network perimeter using procedures performed from outside the organization's systems using tools such as Nessus, WireShark, and Nmap.
• Conducted Wireless security assessments for clients across systems, applications, and networks to evaluate security policies.
• Provided security consulting services, responding to requests for assistance with specific projects related to intrusion detection/ prevention, log management, security incident/ event management systems, IPSec, SSL, SSH, and access control lists.

Confidential

Network Administrator, Alexandria, VA

Responsibilities:

• Deployed VMware best practices including HA, DRS, FT, and VMOTION.
• Engineered and deployed VMware ESXi 5.5 server environment to improve the availability of Sybase database applications.
• Supported Windows 2008, IIS, DNS, DHCP and Gathered hardware and software specifications from Dell, VMware and Microsoft.
• Implementation of security technologies in coordination with a project manager, including SEIM, IDS/IPS, Network Access Control, and Single Sign On solutions.
• Stay current with developing technologies, emerging threat landscape and predict impact of changing technologies.
• Support company through the testing and evaluation of new technologies and security controls; assist and support Security Analysts as they perform vulnerability, network and network security assessments remediation.

Confidential

Network Support Engineer, Reston, VA

Responsibilities:

• Supported 1000 clients running VMware, Confidential and Microsoft technology. Installed and configured disaster recovery tools on workstations, servers and SAN devices.
• Supported cloud based initiatives for Managed Service Providers, by deploying virtual machines from system backups and provisioning disaster recovery sites.
• Resolved network related issues and closed tickets in Remedy.
• Responsibilities included verifying the completion of backup jobs and monitoring application logs for system errors.
• Provided consultation to the Confidential community concerning the use of data replication and compression. Performed bare metal restores to dissimilar hardware for virtual and physical machines.

Confidential

Network Engineer, Langhorne, PA

Responsibilities:

• Primary Engineer responsible for all network operating systems and communication devices. Deployed LAN/WAN devices and their corresponding software.
• Supported Confidential ASA 5510 firewall rule set and effectively communicated firewall changes. Administered Confidential firewalls, routers, switches and wireless devices.
• Successfully engineered site to site VPN tunnels for branch office locations. Managed the change control process and created standard operating procedures when necessary.
• Monitored, maintained and facilitated application and data integrity by utilizing server snapshot technology and Backup Exec 10.
• Deployed mission critical enterprise applications such as MAS 500 accounting software and MS SQL 2005. Assisted upper management with network design, planning, procurement and IT purchases.
• Effectively managed a Quality of service project for 25 remote locations.