SUMMARY:

• Analyze Information Assurance - related technical problems and provide engineering and technical support in solving related issues.
• Install general software patches and upgrades in accordance with Confidential requirements.
• Trained in Cybersecurity operations, maintenance and security development life cycle (SDLC).
• Develop and implement testing strategies and document results.
• Experienced in Vulnerability Management, and compliance in accordance with Confidential requirements.
• Recommend information assurance/security solutions to support RMF(Risk Management Framework) requirements
• Certified in Host Based Security System ( Confidential )
• Certified in Assured Compliance Assessment Solution ( Confidential ).
• Designs & engineer repetitive technical solutions based on business requirements and defined technology standards.
• Provide technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards and technologies

WORK EXPERIENCE:

Confidential

Senior Cyber-Security Engineer

Responsibilities:

• Report weekly to the Confidential of Information Systems on my project for Server 2003 management requirements and results.
• Lead for Server 2003 End of Life program which incorporates as a primary duty being a SME (Subject Matter Expert) in the decommissioning process, conducting reviews and test as necessary to produce assessments and descriptions of vulnerabilities.
• Research Cybersecurity Vulnerability procedures and available open source information to provide action plans.
• Develop procedures for hardware and software management to in corporate procedural security.
• Served as a team (Application Support) lead for creating and managing the RMF (Risk Management Framework) process. My team conducted the first completed RAP’s (Risk Assessment Package) for several Confidential IT applications. This is in direct support System Security Representatives supporting the accreditation of new and existing systems. This is a new RMF process being initiated as we transition from Confidential to RMF. Developing policy and procedures for applications for procedural security.
• Monitor processes and projects of (AIS) automated information systems, tracking of metrics of vulnerability management process which is used in the mitigation of risk and provide threat and risk assessments of the cyber security environment via Assured Compliance Assessment Solution ( Confidential ) reports.
• Analyze the processes involved in daily usages involving major Confidential AIS and recommend information assurance/security solutions to support customers’ requirements. Through data analyses of AIS information evaluate corporate-level changes, assess and report on adequate responses to cyber-security threats, vulnerabilities and risk.
• Analyze evaluate enterprise scan results of Network Assets. Attend weekly Governance meeting where Confidential results are discussed and analyzed.
• Provide recommendations for IAVM non-compliance issues. Conduct a review of the assessments and report on the vulnerabilities, threats and remaining risk, provide to incident response investigations.
• Conduct analysis of publicly known exploits and vulnerabilities to alert the Confidential (Network Operations Security Center) to assist them in the creation of customized detection and prevention methods which might also include system specific ( Confidential ) Host Based Security System information.

Confidential

Information Assurance Network Specialist

Responsibilities:

• Apply Confidential Principles to Confidential STAMIS (Standard Confidential Management Information Systems).
• Following STIG (Security Technical Implementation Guides) security standards. Analyze, evaluate and monitor technical computer security features Provide assessments and report on the vulnerabilities, threats and remaining risk. Provide procedural guidance to system manages, designers, and security engineers to assist them in accomplishing effective security solutions in a timely manner. Monitor and evaluate technical computer security feature implementation.
• Recommend information assurance security solutions and corrective actions to support customer requirements, coordinating with business office personal to assure funding meets the need of validated resources required to meet objectives. Analyzing ever changing corporate-level changes and objectives and assuring an adequate response to meet those objectives.
• Analyze projects and conduct reviews on techniques being used, prepare brief(s) with supporting recommendations of implementation of alternative methodologies to meet security objectives
• Perform vulnerability/risk analysis of computer systems and applications analyzing processes involved in DeCA print management AIS (Automated Information Systems) during all phases of the system development life cycle.

Confidential

Sr. Consultant

Responsibilities:

• Provide a single point of contact for end users to receive support and maintenance within the Enterprise organization's desktop computing environment. Providing technical assistance for activities in the field (Commissaries) across the country. As the SME (Subject Matter Expert) for supporting the store(s) establishing, recommending, implementing, and various policies involving security requirements for equipment being shipped to and from Headquarters for servicing.
• Install, upgrade, support and troubleshoot Enterprise Applications hosted on Windows Server 2000/2003/2008.
• Consult with top level design and operational specialist to ensure proper interpretation of security design policy and standards creating an environment where desktop computers interconnect seamlessly with diverse systems including associated validation systems, file servers, email servers, application servers, and administrative systems. Conduct a review of the assessments and report on the vulnerabilities.
• User account administration, i.e., account creation and management and password resets on Active Directory
• Working technical knowledge of current protocols, operating systems and standards. Research Cybersecurity Vulnerability procedures and available open source information to provide action plans. Conduct test and review results of AIS (Automated Information Systems) to ensure safeguards meet DeCA policy requirements.
• Analyze the processes involved in daily usages involving major Confidential AIS and recommend information assurance/security solutions to support customers’ requirements

Confidential

Site Team Lead

Responsibilities:

• Manage Teams of technicians in the backup and migration of user data to new assets.
• Coordinate all on-site activities with on site management.
• Manage deployment of new assets ( Confidential Computers) to end-users, monitoring quality objectives.
• Track storage of recovered assets and new asset inventory.
• Report directly to Project Manager for time utilization/reporting for site technicians.

Confidential

Client Services Administrator

Responsibilities:

• Manage Change Configuration process of software programming for remote server access.
• Ensure workgroup computers not meeting STIG requirements are re-imaged and patched to meet the requirements as defined.
• Develop and implement testing strategies, as well as policies and procedures in the area software and hardware hardening and documenting the results.
• Make recommendations to purchase software to allow scanning and remediation of Confidential issues.
• Served as the TIER II support for the Fort Lee Commander and his staff.
• As a SME I attended weekly meeting to establish Information Assurance goals (DICAP) with process implantation tracking and monitoring of major IS/IT systems.
• Coordinate with other subject matter experts internal and external to the IT/IS program as the need arises. Reviewing risk and vulnerability assessments of installed systems identifying the areas requiring additional protection.

Confidential

PC Support Technician

Responsibilities:

• Interface support accomplished remotely or face-to-face, while being tracked in Remedy and/or Track-IT.
• Install, upgrade, support and troubleshoot for printers, computer hardware and any other authorized peripheral equipment.
• Diagnose and quickly resolve a wide range of Windows applications and networking problems to help minimize downtime.