SKILLS SUMMARY

• Computer Technology Administration 27 Years
• Technical Training Development Instruction 30 Years
• Computer Security Information Assurance 26 Years
• Supervision Project Management 18 Years
• Communications Technology Maintenance Repair 39 Years
• Database Development Administration 10 Years
• Software Systems Engineering 17 Years
• Certification Accreditation 14 Years
• Computer Modeling and Simulation Development 12 Years
• Systems Analysis Forensics Evaluation 12 Years
• Technical Writing Manual Development 32 Years
• Computer Hardware Interface Design 11 Years
• Tactical Systems Support Development 8 Years
• Computer Incident Response Support 17 Years
• Information Technology Architecture, SOA Web Services Support 11 Years
• Classified Program Support 27 Years

OVERALL EXPERIENCE

Confidential

• Information Security Forensics Management Team ISFMT , Bath, S.C. Performs detailed security evaluations and assessments SA A , certification and accreditation C A support, test and evaluation, risk assessments, and third party independent verification validation IV V of security controls, software programs, wireless network assessments, audits, computer support actions, network and systems administration function consulting activities for variety of clients. Primary security activities include security controls assessments, test evaluation efforts for security of systems, security documentation development to include policies and procedures, security risk assessments, threat assessments, task lead trainer for COOP and Anti-Terrorism support for DOD field level agency, and system-level certification activities while performing C A, A A, DIACAP and FISMA compliance activities for multiple governmental, military and private clients. Security certification instruction, security management training and forensics investigation training is provided to various organizations and events throughout the United States, with delivery of multiple certification course and training sessions courses provided include CISSP, CISM, CISA, Security , Digital Network Forensics, DIACAP, CAP, ISSEP, CRISC, ISSAP, CGEIT, ISSMP, Cyber Terrorism Response, IT Auditing In Depth, Anti-Terrorism and Modern Cyber Trends Threats. I also performed duties as an adjunct instructor in digital and network forensics at Augusta State University. During this period I wrote Computer Incident Management and Forensics Team Management book published November 2013 by Syngress Press, ISBN: 978-1-59749-996-5. This book provides security professionals with a complete handbook of computer incident response from the perspective of forensics team management. This unique approach teaches readers the concepts and principles they need to conduct a successful incident response investigation, ensuring that proven policies and procedures are established and followed by all team members.
• Other security actions include performance of detailed computer and information forensics data collections, evaluations, investigations. These investigations include review of suspect hard drives, removable drives, networks, and malicious software code examinations, evaluations, and disassembly. Data recovery and analysis reports are developed, documented, and delivered to both private and governmental clients. Develops incident response action plans, implements same, and recovers data and incident particulars for further investigation, evaluation, analysis, and follow-on procedural activities. Research and develop full system-level risk assessments including threat reviews, vulnerability reviews, likelihood of exploit determinations and residual risk reports. Performs site evaluations and installation recommendation reviews for wireless system deployments on an as-needed basis for customers and clients. Perform detailed evaluations for Disaster Recovery and Business Continuity of systems, applications, essential functions and primary recovery needs for both private and public organizations. Developed and conducted business impact analysis BIA events for clients. Primary architecture activities include design and development of corporate security architectures for customers, based upon Business Impact Analysis events, gathering of operational requirements, and business process re-engineering. Outputs from these efforts include all operational, system, and technical architectural views for DODAF compliant organizations and all appropriate documents and drawings for Federal Enterprise Architecture compliant organizations.
• Served as the primary regional security administration and IT support person for all office and off-site locations. As senior security engineer, I performed duties as Information Systems Security Manager ISSM for high profile customers throughout the client base of LMIT PS to include the Pentagon Renovation and Construction Program PENREN/C and the Washington Headquarters Services WHS , the main support element for all support activities within the National Capital Region for the Department of Defense. These duties included updating and maintaining the security posture for all workstations and servers assigned, providing tracking and statistical data to military, civilian and federal authorities, providing policy and procedural guidance and recommendations as needed or requested, conducting the risk management process, overseeing the DIACAP reviews for operational systems, updating the DISA based Vulnerability Management System for all assigned equipments and systems with current status, patch levels, Plans of Actions Milestones, and assigning new systems, applications, and equipment as it is fielding within the 9 Domains of WHS, and generally overseeing the actual day-to-day security operations of the IASO cross-domain assigned staff, which number 11 and are from multiple staffing vendors. Participated in planning, operations, and after action reviews for WHS scheduled and unscheduled COOP exercises and events as well as oversight of assigned IASO activities for COOP events. Also I served as primary security engineer for customer and LMIT Information Assurance programs and projects including performing reviews and engineering evaluations for System Security Authorization Agreement SSAA and Certification Accreditation C A activities in support of organizational DoD Information Technology Security Certification and Accreditation Process DITSCAP and the new DoD Information Assurance Certification and Accreditation Process DIACAP activities and submittals. The areas of evaluation and support included COOP and Contingency Planning, Incident Response, Audit and Accountability, Risk Management and Risk Evaluations Assessments, Systems Communications, User authentication and identification, and system and network integrity.
• I was the senior Modeling and Simulation M S engineer for military, federal and commercial customers and programs and M S task lead for projects and programs with modeling and simulation activities involving the use of OPNET toolsets, CA All Fusion toolsets, and other M S toolsets. I performed duties as the software architect for the WIN-T Embedded Training system, which included developing architecture diagrams and analysis reports, requirements gathering and development for embedded training efforts, providing operational and system view documents in accordance with the DOD Architecture Framework DODAF requirements and Army Training Development standards and procedures, and concepts of operation for training the operator, maintainer and repair soldiers on the WIN-T integrated wireless communications system.

Confidential

Performed duties as Study Leader, Software Subject Matter Expert, Database Administrator and Programmer for Integration and consulting company at the U.S. Army Signal Center, Modeling Simulation Branch, Analysis Division, Ft. Gordon, Ga. Served as project study lead for First Responder RF Spectrum study activities, which include interfacing with both military and civilian first responder organizations, data collection and evaluation, database table creation, coding and data loading, scenario development and simulation execution for study analyses and evaluations. He performed interfacing activities with federal, state, and local governmental organizations in first responder, homeland security and crisis management areas. Primary office activities included detailed evaluation, review, debugging and modification to communications modeling and simulation event-driven software models to include C language code, PERL scripts, OPNET Technologies modeling simulation engine and Excel spreadsheets in support of modeling and simulation projects. Full DODAF Architecture development was included in my studies activities wherein I developed Operational Views, Systems Views, and Technical Views all based on operational unit requirements, Information Exchange requirements, unit hardware configurations, and communications systems software components. Activities were performed for the U.S. Army Training and Doctrine Command Futures Center, Architecture Integration and Management Directorate, Analysis Division, Modeling Simulation Branch. Developed and implemented input and output analysis data files and tools utilizing MS Access, Visual FoxPro and SQL Server databases. Additional duties included development and implementation of project, program, and simulation requirements, test plans, test strategies, and actual test performance to analyze communications requirements and tactical system architectures to recommend operational and requirement alternatives. Provided further support as the functional requirements project lead and support database administrator for the development and operation of the Spectrum Analysis and Modeling System SAMS modeling tool for the U.S. Army Spectrum Management Office. I served as Branch Subject Matter Expert for all Information Operations, Information Assurance, and Computer Security simulation-based activities. He developed a classified web site for secure and reliable spectrum-based data and program support for worldwide classified customers. He developed and presented office, model and system briefings, seminars and presentations to national and international technical, simulation and managerial conferences.