FISMA Analyst

• Sep 2020 - Present

Cyber Security Analyst

• Nov 2015 - Oct 2020

- Supported client Security policies and activities for networks, systems and applications including Vulnerability Management, Incident Reporting, Mitigation, and Continuous Monitoring- Supported all Assessment and Authorization (A&A) phases and processes- Proven ability to support the full life-cycle of the Assessment and Authorization (A&A) process- Developed, reviewed, and updated Information Security System Policies, System Security Plans, and Security baselines in accordance with NIST, FISMA, OMB App. III A-130 and industry best security practices - Applied appropriate information security control for Federal Information System based on NIST, FIPS, and OMB A-130 Appendix III - Direct experience with formatting, customizing, and providing feedback for documentation relating to Information Assurance & IT Security Vulnerability- Provided security expertise and guidance in support of security assessments. - Supported A&A (C&A) activities according to the A&A project plan- Review, analyze and evaluate business system and user needs, specifically in Authorization and Accreditation (A&A) - Perform internal audits of the systems prior to third party audits- Reviewed authorization documentation for completeness and accuracy for compliance- Facilitated Security Control Assessment (SCA) and Continuous Monitoring Activities - Executed examine, interview, and test procedures in accordance with NIST SP 800-53A Revision 4- Validated information system security plans to ensure NIST control requirements are met- Authored recommendations associated with findings on how to improve the customer’s security posture in accordance with NIST controls- Assisted team members with proper artifact collection and detail to clients examples of artifacts that will satisfy assessment requirements- Updated and reviewed A&A Packages to include Core Docs, Policy & Procedures, Operation and maintenance.

Information Technology Specialist

• May 2014 - Nov 2015

- Developed, reviewed, and updated Information Security System Policies, System Security Plans, and Security baselines in accordance with NIST, FISMA, OMB App. III A-130 and industry best security practices. - Applied appropriate information security control for Federal Information System based on NIST 800-37 rev1, SP 800-53, FIPS 199, FIPS 200 and OMB A-130 Appendix III- Provided security expertise and guidance in support of security assessments - Supported A&A (C&A) activities according to the A&A project plan- Reviewed authorization documentation for completeness and accuracy for compliance- Facilitated Security Control Assessment (SCA) and Continuous Monitoring Activities - Executed examine, interview, and test procedures in accordance with NIST SP 800-53A Revision 4- Ensured cyber security policies are adhered to and that required controls are implemented- Validated information system security plans to ensure NIST control requirements are met