Lead Security Controls Assessor

• Nov 2021 - Present

Senior Information Assurance Analyst

• Dec 2020 - Dec 2021

Senior Security Analyst

• Mar 2019 - Dec 2020

ISSO Centers For Medicare and Medicaid.

• Aug 2018 - Mar 2019

Security Engineer ISSE

• Dec 2017 - Sep 2018

Performed Risk Analysis for upgrades to system hardware and software at Defense Logistics Agency. Researched and determined risk analysis for upgrades to existing software/hardware systems and requests for additional hardware and software solutions running on DLA and cloud-based platforms including MilCloud, AWS, and Microsoft Azure.

Security Engineer

• Jun 2015 - Dec 2017

Security Engineer and Milcloud ISSO at Defense Logistics Agency. Security Engineer and Milcloud ISSO at Defense Logistics Agency.

Information Systems Security Officer

• Dec 2014 - Jun 2015

Patuxent River Naval Air Station. Maintain C&A on data systems, communications systems, and PIT test benches associated with the PMA-274 Presidential Helicopter Program for the United States Navy and the United States Marine Corps. Utilize eMASS and MCCast programs to track the C&A process while working with system administration and vendor engineering staff to facilitate resolution of security issues and the accreditation of helicopter and ground based data communications platforms. Evaluate terrestrial and satellite based communications for C&A activities. Reviewed eCASS scans and POA&M's from system administrators in order to maintain mission assurance and a high level of data system integrity and security.

Independent Consultant - Principal, Cyber Security/Information Assurance

• Jan 2013 - Jun 2015

Experienced Cyber Security Analyst seeking contract engagements or a permanent placement in Cyber Security/Information Assurance. Currently hold the following certifications: CISSP, Security +, ITIL V3 Foundations, A+, Cisco CCENT, and Microsoft MCSE. Advanced knowledge and experience implementing andSTIG hardening Microsoft Server 2003 R2, 2008 R2, 2012 R2, and Microsoft Exchange Server. . Experienced Cyber Security Analyst seeking contract engagements or a permanent placement in Cyber Security/Information Assurance. Currently hold the following certifications: CISSP, Security +, ITIL V3 Foundations, A+, Cisco CCENT, and Microsoft MCSE. Advanced knowledge and experience implementing andSTIG hardening Microsoft Server 2003 R2, 2008 R2, 2012 R2, and Microsoft Exchange Server. .

Cyber Security Consulting Services Company

• Dec 2013 - Jun 2014

Principal consultant. Principal consultant.

Cyber Security/Information Assurance Officer

• Jan 2013 - Mar 2014

Most Recent Engagement: Maintained a Closed Area SiprNet Network of seven servers and fifty workstations to maintain compliance with DoD 8570 requirements. • Performed system security tasks including user account and access control list (ACL) maintenance and reviewed these for accuracy. Performed account deletions based upon regular audit of current employee list. • Conducted System Readiness Reviews and compiled CRR reports as part of regular Information Assurance tasks. Utilized network scanning software. • Documented IA baseline information logs and updated changes to baseline data to support Configuration Control, Change Management, and C&A processes and policies. • Monitored, interpreted, and tested IAVA releases and implemented appropriate mitigation steps. Updated the Vulnerability Management System (VMS) to record compliance. • Monitored aggregated security and system logs for evidence of untoward network activity or intrusion to maintain information security and reported any violations immediately. Logs maintained on secure server. • Maintained a physically secure and controlled location for servers and network infrastructure devices and maintained access logs to this facility. • Monitored and maintained the secure storage of network management data including passwords, diagrams, and audit logs. • Delivered security awareness and information assurance training and certification in accordance with DoD 8570 Workforce Management Directive. • Audited new systems for baseline compliance with STIG’s and DoD baseline Information Assurance controls as part of the C&A process. Systems verified to be COTS and GOT evaluated platforms.

Information Assurance Officer

• Dec 2010 - Dec 2012

• Managed system security tasks including user account and access control list (ACL) maintenance and reviewed these for accuracy. Performed account removals based upon change requests and from the results of regular audit of employee list. • Documented IA baseline information logs and updated changes to baseline data to support Configuration Control, Change Management, and C&A processes and policies. • Delivered security awareness and information assurance training to staff in accordance with IBM DSP and DoD 8570 requirements. • Reviewed new server implementations for STIG compliance and reported negative audit findings to system administrators for mitigation in support of the Certification and Accreditation Process. • Advised data center staff on Information Assurance Policies and assisted the staff in complying with these policies. • Designed and reviewed Disaster Recover Procedures documentation and performed table exercises and recovery tests to assure police accuracy and validity. • Performed weekly Nessus auditing to assure compliance with current IAVA’s and other dictated patches and updates. Maintained a log of compliance data. • Provided monthly status reports to Project Manager and Information Assurance Manager.

Proprietor

• Feb 1999 - Dec 2012

Marketed, sold, implemented, and supported Medical Office Management and Electronic Patient Charting software solutions including Medical Manager and MicroMD. Duties included meeting with prospective clients to determine system sizing and organization of the medical practice. Designed solution by specifying hardware, server operating system, and peripherals. Configured servers, workstations, scanners, and printers, and installed the system at the client site. Provided initial training on products and continuing support and service throughout the lifecycle of the solution.

Senior Systems Engineer

• Nov 1997 - Feb 1999

Interfacing with company systems engineers at Marine Corps HQ Quantico on Microsoft Server Products during the planning and implementation of a worldwide conversion from Banyan Vines and StreetTalk to Microsoft NT Server and Microsoft Exchange Server. Consulted with Exchange Server staff at Peterson AFB to migrate Microsoft Exchange Server from a Digital Alpha server farm to Compaq Servers running Microsoft Windows NT 4 and Exchange Server. Interfacing with company systems engineers at Marine Corps HQ Quantico on Microsoft Server Products during the planning and implementation of a worldwide conversion from Banyan Vines and StreetTalk to Microsoft NT Server and Microsoft Exchange Server. Consulted with Exchange Server staff at Peterson AFB to migrate Microsoft Exchange Server from a Digital Alpha server farm to Compaq Servers running Microsoft Windows NT 4 and Exchange Server.