Sr. Tech. Security Analyst Resume Profile
PA
Work Experience: Sr. Tech. Security Analyst -CONFIDENTAIL Job Description: My position with CONFIDENTAIL requires that I hold a Top Secret clearance with SCI, and CONFIDENTAIL. I am proficient with DISA Security Technical Implement Guides STIGS and have helped develop the STIGS for Windows, WEB, Database, UNIX and Cross Domain Solutions. I have completed technical security reviews of Windows, UNIX, Cross Domain Solutions, Databases Oracle and SQL as a Sr. Tech. Security Analyst for DISA Field Security Operations. I support DISA FSO worldwide as a Sr. Tech. Security Analyst reviewer and as a Team Lead. I have assisted sites in achieving the Authority to Operate. I am completely proficient in conducting Security Technical reviews for Certification and Accreditation activities C A , Enhanced Compliance Validation ECV , Command Cyber Readiness Inspections CCRI or System Test and Evaluation ST E at customer sites worldwide. As a team lead I create and deliver Inbrief's and Outbrief's for Senior Leaders at sites, DISA FSO and CYBERCOM. I am comfortable and have briefed Senior Leaders at all levels in the DoD. As a team member I am proficient and authorized to evaluate operating systems for Security Vulnerabilities in a variety of environments including Multiple Virtual Storage MVS For these reviews, I assess Access Control Systems and Methodology, Operations Security and Business and Business Continuity Planning and Disaster Recovery Planning , Windows NT, Windows 2000, Windows 2003, Windows 2008, Windows XP and Windows VISTA Additional, I check Access Control Systems and Methodology, Applications and Systems Development Security and Cryptography, Databases controls , WEB architecture Telecommunications and Network Security Cross Domain Solutions, Traditional Security , Management Practices Operations Security Business Continuity Planning and Disaster Recovery Planning Legal Investigations, and Ethics reviews Physical Security, and Applications. Many of the computing environments I evaluate are complex networks consisting of multiple hardware platform levels Mainframe, Mid-tier PC operating systems. I am fully qualified to run the Gold Disk and provide Gold Disk training to the customer. I am proficient with the System Technical Implantation Guide's STIG's I am also able to teach the customers on the STIG settings and requirements and to ensure their competence when assessing the checks so they can accomplish self-assessments for security compliance. In addition, I have trained the customers on how to evaluate fixes before implementation to ensure integrity is maintained. I am a Level II certified SA and provide training to site personnel on how to correct security deficiencies. I am responsible for ensuring data collected during security reviews are loaded into the Vulnerability Management System VMS and validate the information. I provide VMS training to the customer whenever required. I perform INFOSEC checks for the Government and provide INFOSEC training to the Customer and other reviewers. Security Analyst - CONFIDENTAIL Job Description: As a Security Analyst, I supported the System Accreditation and Certification function within the Enclave Certification section of the Defense Information System Agency, Field Security Operations FSO Division. I performed reviews and analysis of previous Security Readiness Review SRR results to determine the security posture of sites and their information systems or technologies. Reviews, makes recommendations, and provides guidance to sites relative to their System Security Authorization Agreements SSAA as prescribed by DODI 5200.40 DITSCAP. Prepares final Certification packages with supporting documentation for the FSO Certification Authority approval. Software System Engineer - CONFIDENTAIL Job Description: As a Software System Engineer, I was responsible for installing software on IBM OS390 systems, in Chambersburg, Mechanicsburg, and St. Louis. Converted 4 DATACOM regions from 8.1 to 9.0, for the ASIMS Test System, transmitted FIXDOCS from SSO to the Lead and ASIMS Systems, and running the SMP/E receive and apply checks. As a DBA for the Navy's DSS warehouses east of the Mississippi, which contains 12 large DATACOM/DB regions on the production system and 4 DATACOM/DB regions on the test system Which included upgrades to the data structure, rewriting DATA QUERIES for optimization, analyze the system statistics to identify the Data Queries and programs that are the worst performers on the production system. Training the DSS customer on how to optimize Data Queries. Providing 24-hour support. System Engineer CONFIDENTAIL Job Description: As a System Engineer for the SPAR C2 Project, I was responsible for analyzing and translation of programs written in 1968 Burroughs COBOL to 1974 IBM ANSI COBOL, and CA-IDMS/DB. I had specific tasks that included: conversion and testing the local SINR programs for Jacksonville, Norfolk, Pearl Harbor, Kings Bay and Cherry Point. System Engineer - CONFIDENTAIL Job Description: As a System Engineer for the SPAR C2 Project, I was responsible for analyzing and translation of programs written in 1968 Burroughs COBOL to 1974 IBM ANSI COBOL, and CA-IDMS/DB. CA-IDMS/DB is a mainframe based large-scale database management system. My specific tasks included: conversion and testing the local SINR programs unit and string testing of batch programs POC for Pearl Harbor and Yokosuka, Japan sites training of new System Engineers audited string testing of other System Engineers migrated JCL into production CA-7 testing. This process included all phases of the EDS System Life Cycle methodology including: design, analysis, construction, testing, and implementation. I had the responsibility to make sure the 100 SE's had work to do and to make sure we got the sites converted on time and under budget, I had to keep records of all their hours and money spent on the project to include TDY costs. I developed procedures to aid in the conversion and migration process. These procedures supported a user base of approximately 100 SEs. I participated in the site implementation in Jacksonville, Norfolk, Pearl Harbor, Kings Bay, and Cherry Point.
