Objective

• Senior Cyber Security Specialist with eight years of U.S. Government Cyber Security experience who embraces change in an ever evolving world of Information Technology looking for an opportunity to enhance my skills in a competitive business environment.

SUMMARY

• Exceptional verbal and written communication skills that help me to excel in Project Management.
• Attentive listener with superior interpersonal skills that are crucial in Issues Management.
• Strong analytical and problem solving skills in relation to IT auditing and Assessment Programs.
• Meticulous attention to detail in Cyber Security Plan authoring and Certification/Accreditation.
• Self starter with ability to multi - task and work with minimal or no supervision at the senior level.
• Efficient at developing and maintaining productive working relationships.
• Meets deadlines with established guidelines to ensure all projects are completed on time.
• Responds positively to goal-setting and performance measurement to address all project goals.
• Able to use technical experience to address potential false positives in relation to Cyber Security.

• Security Essentials
• Securing UNIX/Linux
• Securing Windows
• Advanced File System Recovery and Memory Forensics
• Wireless Ethical Hacking, Penetration Testing, and Defenses
• Auditing Networks, Perimeters, and Systems
• Computer Forensic Essentials
• Comp Tia Security+ Certification
• Official ISC2 CISSP Review Seminar
• Advanced Security Essentials
• Combating Malware in the Enterprise
• Project Management and Effective Communication for Managers and Security Professionals
• TapRoot Certification for Lead Investigator in Root Cause Analysis and Corrective Action Planning
• Savannah Combat Readiness Advanced Theater Deployable Communications Course
• Air Combat Command Advanced Communications Course
• Silver Flag Advanced Tactical Communications Course
• Certified Instructor for Air Force Cyber Command and Air Education Training Command IT Administrative Experience
• Bluecoat Proxy Server/Data Loss Prevention (DLP)/ProxyAV
• Cisco Mars, Routers, Switches, and Firewalls
• McAfee EPO, Policy Auditor, Foundstone, and Intrushield
• Tenable Nessus, GFI LanGuard, and RETINA Vulnerability Scanners
• FireEye Cyber Defense Tools

PROFESSIONAL EXPERIENCE

Confidential, El Paso, Texas

Senior Cyber Security Specialist

Responsibilities:

• Establishing a Cyber Security program that is compliant with all applicable federal regulations, guidelines and directives in regards to NIST SP Rev. 3, FIPS, FISMA of 2002, the OMB as well as the U.S. Government FedRAMP guidelines for Cloud infrastructures.
• Building an Assessment and Education program to ensure all regulations are met and also insure all implemented policies and procedures are assessed and compared to strong Cyber Security baselines such as DISA STIG checklists that are essential in Information Assurance.
• Implementing stronger Database Security with Database tools such as Oracle Database Vault to address Role Based Access Controls and Separation of Duties/Least Privilege. Serves as lead for Oracle Golden Gate.
• Develops Gap Analysis to determine costs and justification for additional resources and other appliances/products needed in order for day to day operations of an effective Cyber Security Program.
• Implementing Cyber Security Metrics that reflect the standards of NIST and applicable SANS Top 20 Critical Cyber Security Controls.
• Helping to mitigate recurring Plan of Action and Milestones (POAMs) issues identified in previous Office of the Inspector General (OIG) Audits for a network consisting of an estimated 11,000 users.
• Works with NRM Leadership personnel to address incidents involving personnel/information systems and tracks/trends all incident behavior with the Forest Service CIRT (Computer Incident Response Team).
• Identifies vulnerabilities, recommends corrective measures and ensures the adequacy of existing NIST rev 3 Information Security controls of critical infrastructure to include geospatial data.
• Oversight responsibilities for ensuring security requirements for all NRM applications including WEB go through the software develop life cycle process to mitigate risks associated with source code created by NRM developers.
• Educates business unit managers, IT development team, and the regular NRM user community about risks associated with security controls to the U.S. Forest Service Network.
• Building a Cyber Security Education Program to reflect the common avenues an attacker uses to gain access to Information Technology resources such as Phishing emails.
• Plans and coordinates the testing of recovery support and business resumption procedures while ensuring the recovery and restoration of key IT resources and data of critical systems is done within a desired time frame while providing the confidentiality, integrity, and availability of the information.
• Collaborates with Project Managers to determine implications of various project options and recommend the best course of action for project delivery while addressing U.S. Government Cyber Security Requirements such as encryption standards in FIPS 140-2.

Confidential, Oak Ridge, Tennessee

Senior Cyber Security Engineer

Responsibilities:

• Lead Cyber Systems Project Engineer for the awarding of $11 Million in Department of Energy performance based initiative award fees for the completion of two key mission essential systems that were completed three weeks ahead of schedule. Received Confidential &W Y-12 Special Recognition Award for outstanding customer support.
• Four consecutive annual employee performance reviews with the rating of outstanding.
• Lead Engineer for certifying Information Systems when delegated by the site Information System Security Manager for the Confidential .
• Participated on inspection teams and assisted in the resolution of Cyber Security deficiencies, including root cause analysis and corrective action planning. Lead Assessor certified in effective corrective action plan development and issue closure.
• Lead Cyber Systems Project Engineer on mission essential and critical system deployments ensured that all applicable security settings were evaluated and documented appropriately.
• Ensured Information Systems were inspected for compliance with the Y-12 Cyber Security Program, Department of Energy and the National Nuclear Security Administration’s certification and accreditation requirements.
• Lead in system reviews for all Information Systems on both Windows and UNIX platforms for the Confidential .
• Coordinated, scheduled, and performed Cyber Security assessment activities for the Confidential . These assessment activities covered every aspect of the Cyber Security Program from policy and planning security control implementation to the technical implementation of environmental Cyber Security controls.
• Experienced in the handling of Cyber Incident Response and closure to include work with the Federal Bureau of Investigation (FBI) and other Federal and Local Government entities.
• Worked with the Cyber Security Officer on developing Cyber Security metrics and reports within SharePoint 2010.
• Evaluated Information Systems and security plans to address proper Federal oversight documentation such as NIST, OMB A-130, FIPS 140-2 and NAP 14.1C.
• Used technical expertise to assist with various Cyber Security controls such as vulnerability scanning and management of the Data Loss Prevention appliance.
• Responded to Cyber Security related issues involving users in a proficient timely manner to ensure that the issue was contained and addressed accordingly.
• Helped with the design, implementation, and enhancement of Cyber Security awareness and training throughout the Confidential .
• Lead Instructor for the Cyber Security training development and Cyber Security courses for the Confidential .
• Worked under the direction of the Information Systems Security Manager in regards to the designing, collecting, and presentation of briefings to senior management.
• TEMPEST and Protected Transmission System (PTS) Inspector.
• Conducted assessment reports under the direction of the Y-12 Information Systems Security Manager.
• Lead the Virtualization and Cloud computing security controls evaluation and deployment process.
• Worked with the Cyber Security aspects of SCADA and PLC devices throughout the plant’s production infrastructure when assigned.

Confidential, Knoxville,TN

Cyber Systems Specialist

Responsibilities:

• Administered the base Local Area Network (LAN) and implemented new network operating systems hardware/software and developed base wide network operating procedures.
• Maintained an inventory of all network hardware and software.
• Implemented network operating systems and/or network application software, and maintained contact with software suppliers to ensure that current releases of software products were in use.
• Conducted testing of network systems to ensure network software products were compatible with system configurations and to ensure operability, efficiency, and compliance with existing standards.
• Performed system backups to ensure restoration of the database was completed for the respective network equipment.
• Ensured backups of network equipment configuration data were current.
• Conducted problem analysis to identify trends, ineffective practices/procedures, network usage, user complaints, traffic interruptions, and hardware/software capabilities.
• Changed the components of network equipment for efficient operation and recommended major modifications to key network systems.
• Coordinated corrective action to optimize utilization of equipment. Worked with technical support personnel in resolving problems.
• Ensured upgrades to the base infrastructure were identified and submitted requests for equipment and funds to be distributed in the fiscal year budget.
• Planned for future technology integration and worked issues for compatibility and standardization based on the projected customer needs.
• Assisted in determining the feasibility of proposed revisions and the development of new program applications.
• Provided information and recommendations of improvements to management.