Aaron Merrell Email & Phone Number

Bethesda, Md, Us

Bethesda, Md, Us

- Leads a weekly Threat & Vulnerability meeting to assess overall risk to the Foundation. Delegates tasks to IT management and other stakeholders to remediate existing high risk items, such as critical server vulnerabilities or an existing security control gap- Supports the lines of business and programs with cybersecurity issues and communicates changes and trends in the cybersecurity standards and regulations- Responsible for the implementation and interpretation of cybersecurity policies, guidelines and standards including the cybersecurity awareness program- Supports cross-functional teams through the problem resolution process, ensures the necessary security controls exist- Performs physical site assessments of business partners, provides peer review of work product and deliverables and executes release of information analysis to third party business partners- Executes cybersecurity risk and control identification, evaluation, documentation, analysis and reporting processes- Manages the Governance, Risk, and Compliance platform and leads associated projects to expedite existing IT risk and governance processes

Bethesda, Md, Us

Created and currently maintains Secure Development Lifecycle Plan for developers across the Foundation - Train staff on SDL best practices and secure coding techniques - Design and develop SDL platform for developersPerforms vulnerability assessments on internal and third-party software that handle sensitive company data - Analyzes design and implementation from a security perspective - Performs code scans and on-going penetration testingMaintains enterprise Governance Risk and Compliance (eGRC) platform – RSA Archer - Lead designer and developer for company's eGRC applications - Provides documentation and assist staff with using the platformPerforms various SOC functions - Application control and advanced threat detection via Carbon Black Protection - Incident response and threat hunting via Carbon Black Response - Behavioral based prevention via Carbon Black DefenseCyber Forensic Analysis - Use tools to retrieve hard drive images from devices as part of malware incidents or sensitive investigations - Utilize Forensic Toolkit software to index and recover data - Work directly with CISO and HR leadership to deliver requested evidence and suggest recommended actions

Hartford, Connecticut, Us

- Review vendor cyber security assessments to mitigate risk and identify vulnerabilities- Provide technical guidance to maintain the eGRC Third Party Risk Management module and content- Independently identify, develop, and implement security administration processing efficiencies- Assisted in revamping vendor information privacy & security process

University Park, Pa, Us

- Supervised and delegated duties to over fifteen student IT employees- Maintained campus student Ethernet registration database- Handled elevated work orders in the residence halls for students- Assisted in developing software deployment scripts and batch files for unattended software deployment- Created and updated web interfaces for student employees using PHP and MySQL- Implemented new switch connections in resident hall wiring closets- Collaborated with IT staff to utilize building blueprints to design future computer labs

University Park, Pa, Us

- Provided technology support to students, faculty, and staff in a computer lab setting- Troubleshot problems with campus printers and diagnosed hardware issues on lab computers- Configured and registered Ethernet connections and gained a strong understanding of IP technology