Security Analyst II

• May 2016 - Present

IT Security Analyst

• Mar 2014 - May 2016

Dedicated member of the Network Security Team where my daily functions include:Review and Audit System Security Plans to uphold the NIST 800-53 Rev4 standard set of Security ControlsAssist in the Development of Security DocumentationParticipate in the Certification and Accreditation ProcessCreate Custom SQL querries for the FortiAnalyzer that manages the FortiGuard FirewallsManage URL/IP classifications through the FortiNet WebsiteWork with AT&T for IP blocks on the MTIPS FirewallsManage the Juniper and Bluecoat ProxiesDevelop compliance policies for SolarWinds Network Configuration Manager to audit Router and Switch configurations

Network Security Consultant

• Aug 2013 - Feb 2014

Dedicated member of the Network Security Team where my daily functions include:Review and Audit System Security Plans to uphold the NIST 800-53 Rev4 standard set of Security ControlsAssist in the Development of Security DocumentationParticipate in the Certification and Accreditation ProcessCreate Custom SQL querries for the FortiAnalyzer that manages the FortiGuard FirewallsManage URL/IP classifications through the FortiNet WebsiteWork with AT&T for IP blocks on the MTIPS FirewallsManage the Juniper and Bluecoat Proxies

Informaion Assurance Engineer/IT Security Analyst

• Apr 2009 - Aug 2013

Instructed Network Walkthrough class to train personnel how to perform Network Device security audits as per DoD guidanceTrained and Certified auditors for Vulnerability Scanning, Wireless Technologies, and Network Auditing from various agencies, services, and organizationsPerformed network security audits at military installations nation-wide to ensure Department of Defense Standard Technical Implementation Guide (DoD STIGs) compliance. Developed and published Information Security policies, procedures, standards, and guidelines based on NIST and DoD guidelines.Briefed site commanders on findings and recommended compliance actions and types of escalations needed depending on DoD vulnerability severity. Performed security audits and ensured proper NIST compliance on NIPRnet, SIPRnet, and Coalition systems Ensured site adherence to the DoD Directive 8570 for their Information Security Personnel.Gained and maintained working knowledge of DIACAP and DoDI 8500.2 security controls.Gained proficiency in creating and maintaining assets in DoD's Vulnerability Management System (VMS).Analyzed and reviewed Layer 2 and 3 Network device configurations to discover possible security vulnerabilities and helped form mitigation plans. Ensure adherence to network security procedures, policies, and work instructions of the organizationConducted vulnerability analysis on a variety of platforms, including Windows and *nix systems using the eEye Retina vulnerability scanning suite.

Information System Technician

• Jul 1998 - Oct 2008

Manage a WSUS on multiple networks spanning multiple security classifications- Manage a SAV on two separate networks of differing security classifications- Assess and remediate vulnerabilities for over 1,500 information systems- Ensure IAVA compliance across several networks- Conduct Help Desk functions including Tier 1 - 3 Support- Hardware Troubleshooting and repair- Software Troubleshooting and repair- Software and Hardware Upgrades- Created an online trouble ticket system to track ongoing issues- Customer Support- Maintain the Divisions Intranet Portal- Video Tele Conference Technician- BlackBerry Support- Computer, Printer, Software Support- (Tactical) Defense Messaging System Administrator Technical Skills: Networking: Cisco, Juniper, 3COM, Foundry, Checkpoint, Sidewinder, and various IDPS DevicesVoice: Cisco Call manager, Call manager Express, Cisco Unity, Cisco IP Phones Server/OS: Microsoft Windows Server (2000&2003&2008), XP, Vista, Windows 7, Linux, UnixApplication/Tools: Microsoft Office Suite, CiscoWorks LMS, Solar Winds, Whats Up Gold, BMC Remedy, Nessus Vulnerability Scanner, Wireshark, NMAP, VMware, Adobe Suite, Symantec Antivirus, Norton Ghost, eEye Retina Vulnerability ScannerFormal Training: Department of Defense Vulnerability Management System (VMS), DISA FSO