SUMMARY:

• Risk Assessment, Mitigation, Management, Security Controls Requirements, Implementation and Validation, Vulnerability Assessment, Management, Defense - In-Depth (DiD)
• CJCSI, CNSSI, RMF, NIST, DIACAP, BBP, Confidential, Cyber Scorecard

TECHNICAL KNOWLEDGE:

Internetworking technologies, Commercial off-the-shelf (COTS), Government off-the-shelf (GOTS), Confidential Information Enterprise, Boundary Defense technologies, Network architectures, Operating System, Compliance Assessment Tools, COMSEC (Communication Security), CDS, REL-DMZ, ICS/SCADA (Industrial Control Systems/Supervisory control and data acquisition), Process Mapping, Process Re-engineering, Project Planning utilizing MS Project and Visio

PROFESSIONAL EXPERIENCE:

Confidential

Cybersecurity Analyst

Responsibilities:

• Provided support to the Confidential CIO metrics program in the development, collection, analysis, and reporting of Cybersecurity data for the Confidential Cyber Discipline Implementation/ Confidential Cyber Scorecard.
• Participated in performing data strategy requirements development and analysis, stakeholder engagement, metrics development, collection, analysis and reporting and analysis activities.
• Extracted and synthesize complex information to prepare briefings, weekly read-ahead and briefing materials.
• Collected, normalize, and integrate varied data sets into a single repository.
• Assisted in coordinating Federal Information Security Management Act ( Confidential ) reporting (including reporting philosophy/framework).
• Supported the transition effort from Confidential to Cyber Scorecard.

Confidential

Information Security Analyst

Responsibilities:

• Acted as the primary point of contact for cybersecurity related activities, including compliance, vulnerability assessments, risk management, policy and procedures.
• Analyzed to identify security risks, cyber threats and vulnerabilities of networks, automated information system, applications, and new technology initiatives.
• Performed security controls assessments on management, operational, and technical safeguards (or countermeasures) prescribed for an information system to protect the confidentiality, integrity, and availability of the system and its information, and assess IT risks, facilitating and ensure document risks responses are captured.

Confidential

Cyber Security Analyst

Responsibilities:

• Assessed cyber threats and vulnerabilities; identified deviations from acceptable configuration or disclosure.
• Researched new technologies and assess the impacts on system modifications, technological advances.
• Facilitated a consistent application of Information Assurance (IA) policies, processes, responsibilities, and procedures across Department.
• Conducted Analysis on Security Test & Evaluation, Risk Reports, and output from Vulnerability Scanner.
• Worked stakeholders to remediate identified security risks and ensure compliance with requirements.
• Ensured the DIACAP executive package, including the Scorecard and POA&M accurately reflect the security posture and risk of the system and the POA&M reflects a realistic, executable path to full compliance or acceptable risk and write certification recommendations for the Confidential client, adhering to the DIACAP, and the Confidential CIO and G6 processes.
• Reviewed the DIACAP executive package and ACA package, including other documentation necessary to perform analysis of the overall risk level the system poses to Confidential networks ( Confidential LandWarNet) and data and write ATO, IATO, IATT, and DATO recommendations on behalf of the Confidential client.

Confidential

Cybersecurity Engineer

Responsibilities:

• Conducted Confidential Information Assurance Process Risk Management Lifecycle work, validated assigned Information Assurance controls were implemented as required.
• Performed Gap Analysis, recorded compliance status, and maintaining Plan of Actions and Milestones.
• Reviewed security assessment results to ensure networks, applications, comply with the appropriate security configuration guide (STIGs).
• Conducted vulnerability assessments analysis through Vulnerability Scanner, Security Readiness Review, and DISA FSO Checklists.
• Provided validation reports that offered relevant security risk details, vulnerability references, and remediation guidance to management.

Confidential

Cybersecurity Analyst

Responsibilities:

• Conducted risk assessments analysis for new and existing connections present to the Defense Information Systems Network ( Confidential Information Network ( Confidential ).
• Reviewed Network Architecture Designs, Security Controls implementations, and DISA requirements upon making authorizing recommendation the connection to the Confidential /GIG/ Confidential .
• Analyzed protection mechanisms on client's network to ensure Defense-in-Depth are being practice to mitigate risks.
• Researched and documented security based solutions to bring the networks into compliance.

Confidential

Network Systems & Data Communication Analyst/ Technician

Responsibilities:

• Responsible for configuration changes, upgrades, deployments, and maintenance of the network and communication infrastructure.
• Performed capacity planning, performance tuning, and system testing for deployment of Enterprise VTC service updates.
• Analyzed to identify functionality and performance issues, implemented solutions to restore functionality and avoid recurrence.
• Performed load testing and monitoring of the Central Data Communication Processors and Servers.