SUMMARY:

• High - caliber, Confidential professional with over fifteen years of experience and strong background developing enterprise strategies, audit policies and practices in support of cyber security and Confidential activities.
• Exceptional experience implementing controls and assessing information security risk in businesses, health-care providers, and the United States government.
• Talented communicator, skilled at motivating employees and establishing strong relationships with customers, partners, and executives.
• Highly adept at setting the cyber security strategic vision to satisfy business objectives.

PROFESSIONAL EXPERIENCE:

Confidential

Cyber Security Subject Matter

Responsibilities:

• Responsibility for development all IT Security policies, leveraging Confidential 800-53 rev. 4 guidance and Confidential policies
• Host-Based Security System ( Confidential ) - Architecture, Deployment, Compliance, Event correlation, CONOPS
• Provided IA Policy Management for Continuous Monitoring and C& Confidential Efforts
• Represented agency during third-party Audits ( Confidential Inspections) for Headquarters and Global offices which resulted in Confidential passing grade.
• Configure automated monthly Policy-Auditor tasks to determine network Confidential Compliance
• System Architecture and design of Confidential solution
• Updated technical configuration policies to compliant standards
• Developed Dashboards, Reporting Structure, and repeatable Processes
• Train new Confidential global administrators
• Cybersecurity Subject Matter Expertise to Information Assurance Manager (IAM) and Command Information Officer (CIO)
• Supported data calls to include FISMA reporting, PPSM support
• Support of Authority to Operate ( Confidential ) of variety of systems including legacy application systems.
• Leveraging Risk Management Framework (RMF) and DIACAP Guidance
• Information Assurance Team Lead
• Responsible for Cyber Security improvement of processes and reporting structure across Cyber Security program
• Responsible for team vulnerability management processes, cyber network defense (CND) infrastructure and processes, and responding to command IAM tasks
• Lead IA Team to achieve first network Confidential for client infrastructure

Confidential

Information Systems Security Officer

Responsibilities:

• Performed Confidential activities against client systems that are hosted on the Amazon Web Services (AWS) cloud environment adhering to FedRAMP requirements and provided detailed assessment reports
• Assessed System Security Plans (SSP) for systems located and/or leveraging cloud Platform as Confidential Service (PaaS) and Software as Confidential Service (SaaS) solutions
• Worked with system vendors during assessment to provide detailed evidence and adhering to all applicable Confidential Controls
• Lead for assessment activities engaged with all stakeholders to include pentesters, system owners, vendors, clients
• Provide technical security consulting and support services
• Assist the Government in carrying out its IT (Cyber) security oversight responsibilities
• Provide secure architecture design/review, information assurance including security project management, operational security assessments, and other related initiatives.
• Perform Information System Security Officer ( Confidential ) support services for multiple systems in accordance with Federal regulations & standards (FISMA, Confidential, RMF)
• Assist System Owners with annual assessments and three-year Confidential assessments
• Liaise with OCIO Cyber Security and the Government Confidential
• Respond to customer requests to review Security Authorization packages
• Advise System Owners and Program Managers on FedRAMP and FISMA requirements
• Prepare reports and presentations required for communicating findings and recommended solutions to the Government

Confidential

Cyber Security Consultant

Responsibilities:

• Lead all Cyber Security compliance activities for achieving Authority to Operate of the Recovery.gov 2.0 solution, including the Confidential of the first ever government entity to move into Confidential Cloud computing environment.
• Developed site cyber plan and was granted Authority to Operate ( Confidential ) by government Confidential .
• Oversight of development and maintenance of the overall System Security Plan (SSP)
• Adhered to FISMA compliance, Confidential Risk Management Framework, and Confidential Special Publications Guidance, including 800-53 guidance
• Confidential representative for government providing test plans, procedures, and results
• Participated in the development System-specific security safeguards and local operating procedures that are based on the current regulations
• Provided IT security guidance to system owners including development of vital security documents, for example, security incident reports, equipment/software inventories, operating instructions, technical vulnerability reports, and contingency plans
• Worked closely with client security lead to navigate the RATB C& Confidential process and produced all appropriate accreditation documentation

Deputy Program Manager

Confidential

Responsibilities:

• In conjunction with supporting technical programs: Worked with client representatives to identify and capture new opportunities and strengthen the company’s position within the partner channel and civilian market.
• Project lead and managed program supporting Confidential entity SOC, NOC, and Service Desk environment.
• Maintained and developed business relationships with multiple clients.
• Managed, Mentored and coached team of Security Analysts, Network Engineers and service desk personnel.
• Provided support to various programs with proposal writing and staff augmentation initiatives during contract capture phase.

Consultant

Confidential

Responsibilities:

• Certification and Accreditation (C& Confidential ) support to Department of Defense Designated Approval Authority ( Confidential ) and Certification Authority (CA)
• Extensive knowledge and research of Confidential and Confidential controls when evaluating new solutions for the Marine Corps Enterprise Network ( Confidential )
• Technical lead for the certification review of all Confidential sites transitioning to the Confidential Marine Corps Intranet ( Confidential ) on both the Confidential and Confidential
• Perform tasks, including IA analysis, security requirements development, analytical support for IA policy development, and risk assessments, vulnerability analysis, and security test and evaluation planning, execution, and reporting
• Review and provide network security related recommendations to the Marine Corps Enterprise Network ( Confidential and Confidential Marine Corps Intranet ( Confidential ) vendor(s) regarding development of the Confidential architectures supporting the Marine Corps
• Member of Engineering Change Control Board ( Confidential ) and Certified Solutions Review ( Confidential ) board

Cybers Security Analyst and Team Lead

Confidential

Responsibilities:

• Supported multi-billon intranet with over 600,000 multi-agency users
• Tier 4 Senior Administration and engineering of all cyber security devices including firewalls, IDS, Ant-virus servers, mail-relay devices, load balancers
• Provided 24 x 7 support of all assets within enterprise operations center while also on call to internal and external clients
• Reviewed, translated, and implemented solution from legacy firewall configuration into readable format for legacy network cutovers and in support of C& Confidential requirements.