Experience

Next Phase Solutions and Services, Inc.

• United States
• IT Services and IT Consulting
• 1 - 100 Employee

• Information Systems Security Specialist

  • Apr 2020 - Present

  • Utilize vulnerability management tools Tenable and Amazon Inspector to assess the risk of vulnerabilities across all company assets and provide remediation steps to address identified vulnerabilities. • Communicate with system stakeholders on vulnerabilities impacting systems to plan and document remediation actions for identified vulnerabilities. • Deploy and manage Cloud SIEM tool Sumo Logic, to provide key personnel with critical security information on applications deployed within the company. • Assist ISO in security audits across various programs to maintain compliance with Centers for Medicare & Medicaid Services (CMS) standards. • Conduct daily vulnerability and web application testing and risk assessments. • Ensure programs’ systems security plans (SSP) include properly documented implementation details for security controls from NIST 800-53. • Document and maintain a running list of vulnerabilities impacting all organizational components. • Analyze, remediate, and document vulnerabilities across AWS cloud environments for Enterprise Master Data Management (MDM) and Enterprise Data Lake (EDL). • Responsible for leading vulnerability and compliance meetings for program teams, including IT services. • Support, implement, maintain, and monitor security controls in compliance with FISMA, HIPAA, FedRAMP, and NIST RMF for the following programs: Enterprise Master Data Management (MDM), Enterprise Data Lake (EDL), and Enterprise Monitoring and Management (EMM). • Ensure the safety of information system assets and protect systems from malicious actions. • Organize and complete supporting assessments, penetration testing, related document requests, and vulnerability remediation efforts. Show less