Abe E Email & Phone Number

Texas, United States

New York, Ny, Us

• Conducted in-depth threat modeling for various systems, focusing on cryptography solutions and systems involving tokenization, KMS, and HSMs.• Developed and implemented compliance controls and AWS guardrails, including integration with tools such as WIZ.IO, to ensure alignment with security best practices and regulatory requirements.• Provided solution development for cryptographic technologies, driving the architecture and security measures for secure document processing and tokenization systems.• Led risk assessments and architectural reviews, ensuring secure integration of cryptographic systems in both cloud and on-prem environments.• Developed and enforced local policies and control procedures for cryptographic systems, ensuring proper handling of encryption keys, data protection, and compliance with regulatory frameworks.• Collaborated with cross-functional teams to enhance the security posture of cryptographic and cloud-based systems through guardrail controls and automated processes.

New York, Ny, Us

Directed an engineering team in strategizing, designing, and executing HSM solutions for clients.Experience with various solutions including; Thales Luna, Keysecure, Ciphertrust, Vormetric, IONIC, Futurex, Azure Key Vault.Translate complex regulations and technology standards into actionable functional and technical requirements in cloud, hybrid, and on-premises environmentsLead teams through various phases of gap analyses assessment, remediation planning, roadmap development, implementation of remediation actions and facilitated action through Agile framework.Deliver on the vision, architecture, execution and quality assurance of security projects for clientsGuides stakeholders, ensures alignment with security strategies, roadmap development, and establishes architectures patterns to best practicesCollaborated with vendors to conduct thorough investigation, testing, and validation of products and solutions.Maintained close ties to various stakeholders, developers, and engineers across the company, ensuring the services we created meet their needs as products evolve.Support audits and compliance monitoring.Updated plans and programs based on changes in internal and industry standards and regulatory environment.Perform/lead encryption key ceremonies as a key security officer as needed.

New York, Ny, Us

• Built Azure Key Vault infrastructure to support cloud-based applications. Configured firewall rules, access rights, as well as logging and monitoring. Configured Private link connection to prevent data transfer via public IP space. • Integrated logging into Kafka data streams to be ingested by Splunk for real time monitoring and response. • Utilized Infrastructure as Code (IaC) to automate infrastructure builds, modifications, and tear-down using Terraform, PowerShell, Python, Azure Templates. • Tested and implemented Azure Key Vault integration with Thales Luna HSM via the use of they Bring Your Own Key (BYOK) process and tool. Enabled generation of key exchange key and secure creation of master key. • Built AWS infrastructure to support ShardSecure Proof of Concept application. Built and configured S3 buckets, EC2 instances, scaling groups, load balancers, and associated policies. Utilized security groups and network access control lists to restrict access. • Used Python and AWS Cli to automate application testing as well as Terraform Enterprise to automate build out, modifications, and tear-down of supporting infrastructure.

New York, Ny, Us

Leadership- Led Forensics Infrastructure team to break through a stuck, yearlong project of upgrading EnCase application from v6.0.3 to v20.3. Completed additional upgrade to v21.1 in 3 months.- Assessed & triaged projects in deadlock to create new streams of work & measurable goals. Coached team to prioritize & methodically tackle tasks.- Aided team’s adoption of Agile framework. Worked to plan, manage, & execute tasks within 2-week sprint model as well formulate project design into epics based on quarterly goals. Architecture- Successfully blazed the trail in pursuing adoption of the firms Centrify solution & integration into AD. Onboarded infrastructure of 132 Linux servers. Completed transfer of accounts, entitlements, roles, & accesses for engineering teams. Aided teams in understanding adoption. - Architected & engineered build of malware reverse engineering lab. Worked across multiple teams & departments to design a complete solution to enable the firm’s malware analysis team while satisfying an outstanding audit violation. Engineering- Led the charge to Go-Live with RelativityOne after years of delay. Brought teams together, accomplished technical tasks, & broke down barriers to meet deadlines. - Integrated authentication into RelativityOne with internal identity & access management solution allowing for automated user account provisioning via OIDC. Worked with vendor to develop code to meet firm’s guidelines & ensure the application is only accessible from within the firm’s network. - Facilitated the automated processing of exact data matching files through establishing automated file transfer & SFTP routes. Utilized public/private key authentication for secure, passwordless data transfer with limited user interaction.- Developed Python script to identify users in DLP policy inclusions & exceptions. Fully automated analysis, secure data transfer via public/private key, & DLP ingestion.

Arlington, Va, Us

• Cybersecurityo Designs, implements, and configures Splunk architectural solutions. Utilizes Splunk to audit and investigate security and performance issues. o Reviews logs and events via SIEM / Splunk to detect and investigate any anomalies. Creates SPL queries, searches, reports and dashboards to identify abnormalities.o Interprets regulations and aids in the development of local policy.o Develops, evaluates, and implements processes and procedures for security controls including incident response, cloud security, media handling, and security configurations. • Architectureo Designs and implements security control framework for required regulations.o Coordinates with end users, engineers, and support staff to implement security controls on emerging and legacy applications and systems while maintaining business operability. o Troubleshoots security configuration issues across various platforms, disparate locations, and technologies. o Effectual and timely collaboration with partners in projects and troubleshooting ongoing concerns.o Collaborates with 3rd party vendors, investigates, analyzes, and test solutions to be implemented business wide. o Provides knowledge and training of tools and technologies used across the enterprise. • Engineeringo Works with multiple disperse sites to create solutions to common problems. Enforces security controls and policies through technical controls. o Reviews logs and events via SIEM / Splunk to detect and investigate any anomalies. Creates SPL queries, searches, reports and dashboards to identify abnormalities.o Automates Splunk implementation across multiple diverse and isolated systems via PowerShell.o Develops Windows hardening package and automates creation of organizational units, policies, and importing of policies.

Arlington, Va, Us

• Risk Governance and Complianceo Developed baseline security controls and tractability matrix. Used to address over 600 controls in NIST 800-53 as a standard way of security systems and networks. o Worked on various air-gapped, closed areas to assess the security of the system, conduct vulnerabilities assessments, create plan of action and milestones for corrective actions, and drove teams to complete all open actions. o Coordinated with project managers and leaders in determining prioritization of critical findings to resolve while meeting business objectives. o Developed system security plans and ensured systems are in accordance with the Risk Management Framework, JSIG, and local policies.o Develops the security of electronic information and establishes security systems, policies and procedures to prevent system compromise or infiltration.o Monitored and evaluated the adequacy of corrective and preventative actions plans and completeness of reports. Assist in root cause analysis. Participate in critical incidents and implementation reviews• Engineeringo Wrote comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.o Performed technical security reviews or assessments to ensure targeted systems, networks, applications and/or data are in compliance with corporate policies and standards.• Cybersecurityo Researches/investigates emerging infrastructure security topics, threats, capabilities, and solution options to create/update policy and governance, technology strategies, solution architecture, and vulnerability assessmentso Performed comprehensive threat/risk assessments and business impact analysis of current system, data, application and technology environments to determine possible internal and external threats to information assets, and identify security measures required to counter such threats.

• Leadershipo Ministered and counseled teenagers, young adults, parents, and families. Built relationships and empathized with families to help them through trials. o Created, led, and managed volunteer teams for weekly activities and special projects. Skilled in growing and disciplining individuals and teams to realize maximum potential. o Community leader. Active in outreach, prison counseling, hospital counseling, and high school leadership training. Participated, led, and helped in community events designed to fill needs.• Speakingo Excelled in public speaking. Learned to engage various and widely diverse audiences from small teaching classes to large conferences. Sought to speak at local and national events. o Able to take complex topics and translate to simple, understandable, and engaging bits.

Arlington, Va, Us

• Risk Governance and Complianceo Primarily responsible for establishing and maintaining overall information security posture and serves as principle advisor for all matters technical or otherwise involving the security of the organizational technology platforms.o Key in developing and maintaining secure operating environment for assigned programs. Responsible for developing system security plans and ensuring systems are in accordance with JAFAN 6/3, NISPOM Chapter 8, and local policies.o Conducted user initial and recurring information systems security training and awareness. Provided guidance in following prescribed policies while maintaining mission flexibility. Key in development of file transfer plans and system security plans. o Approved, disapproved and tested software, hardware and firmware. Performed security certification and verification analysis of networked, standalone assets, mobile components, and test equipment. o Audited and provided accountability for information systems assets. Assured security for hardware/software, physical, logical, and technical structure of operating environment. Reported and investigates all anomalies.• Forensicso Conducted computer forensics on an infrequent basis. Utilized chain of custody and acquired images of components for investigation. Configured search keys and analyzed data through EnCase. Provided detailed reports of findings to investigations.o Identification of malware using memory analysis, live forensics, and hard drive forensics. Performing malware analysis through peer collaboration and sandboxed analysis.• Administrationo Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.o Set up workstations to include OS and software installation; Domain Organizational Unit Administration to include adding equipment and users to the domain.

Aliso Viejo, Ca, Us

• Administrationo Technical expert for the Secure Border Initiative pilot network. Responsible for monitoring and maintaining UNIX, Solaris, and Windows servers with 9 remote monitoring sites and 1 forward operating base. • Network Engineeringo Updated firewall rules. Used Cisco ASA interface and Syslog to monitor IP traffic between servers, network components, and remote monitoring sites. Ensured restricted access and denial of all unnecessary services.o Tracked and maintained 50 mobile tablets. Pushed and created images, applied security updates using Altiris. Secured radio connectivity with VPN certificates. Encrypted and decrypted, pushed encryption pass key via SecureDocs. Installed and configured Symantec anti-virus and MacAfee.o Responsible for status reports of remote sites, forward operating bases, network components, servers and major events. Verified connectivity and health of all devices, components, and servers. Reported, tracked, and resolved outages to complete restoration.

Randolph Afb, Tx, Us

• Cybersecurityo Responsible for maintaining the security, integrity, and confidentiality of information and over 5,500 computer systems connected to the Davis-Monthan AFB $12M network. Ensures all current network security tools are implemented and configured correctly. o Led four virus attacks during wing ORI. Directed personnel, isolated threats, and removed infections ensuring complete eradication. Team player in streamlining future process.o Interacted with Internet Security Services in vulnerability scans. Installed and maintained anti-virus software, contained and eradicated viruses. Maintained firewalls.o Leads patch compliance team. Troubleshoots SMS errors, resolves update compatibility, and verifies base compliance. Proclaimed best in ACC MAJCOM.

Randolph Afb, Tx, Us

• Risk Governance and Complianceo The technical representative for the Designated Approval Authority on issues affecting security and integrity of the Yokota Base Area Network. o Accountable for 161 system certification/accreditation packages and provides guidance on Information Assurance policies and DITSCAP. o Managed EMSEC compliance for $20 million in communications and crypto assets for DoD.o Facilitated various certification efforts; validated network access for 907 foreign nationals, vital part in PACAF led NIPRNet/SIPRNet recertification, and first base 100% compliant in MAJCOM network user licensing.o Directed 5 shops and 20 units during base SIPRNet re-validation. Personally accounted for the correction of 1,055 vulnerabilities allowing continued C2 capabilities for the wing.o Launched information security awareness initiative for 80 security officers and over 5,000 users. Conducted Bi-monthly network security briefings to newly assigned Airmen and quarterly briefings to security officers. Utilized TV, radio, and email to reach user. Developed posters, banners, newsletters, intranet website, and pamphlets to drastically increase in user awareness.o Provided unit assistance in interpreting Air Force network security policies. Created local USB external drive, social network, and multi-functional device policy. Provided INFOCON guidance to Crisis Action Team and provided regional threat briefings to Unit Commanders.• Cybersecurityo Led 2 teams in sanitizing 11 classified message incidents. Ensured 16 workstations and 3 servers were cleared and restored without loss of information. Authored classified message incident checklist to safeguard information, a process lauded by IG inspectors.

Randolph Afb, Tx, Us

Supported Operation Noble Eagle, enhanced security measures after 9/11 terror attack through maintenance of Intel network supporting 200 users. Created patch history script and built Windows Server Update Services server.Resolved multiple backup system failures; enabled 100GB for disaster recover.Setup JWICS domain group policies; provided single-point security configuration for 26 601 AIS workstations.Employed log monitoring software; allowed real-time intrusion/error notification for 47 systemsCreated patch script history; accurate IAVA/B completion; 100% DIA patch compliant in 2 daysBuilt automated patch system; pushed 120 patches/updates in 7 days; dynamic system ensures secure networkStaged 24 desktops/4 domains; enabled AFFOR Intel Division classified processingResolved DIA hub outage; reconfigured JWICS router; NEADS/WADS link restored with minimal downtimeResolved message system crash; restored 15GB of data/established link to MacDill; 100% message enabled.Resolved multiple system failures; restored UNIX messaging system after server crash, reconfigured JWICS router during NEADS/WADS connectivity shutdown, and reconfigured failing Veritas backups to 98% availability.Provided single-point security configuration for JWICS network. Employed log monitoring software to allow real-time intrusion and error notification for 47 systems.

Randolph Afb, Tx, Us

• Administrationo Instrumental in ensuring global email and writer-to-reader messaging capabilities for US Air Forces in Japan and related units totaling more than 4,600 customers daily. o Administration of 13 Defense Message System MS Exchange servers, 4 primary/backup domain controls, 3 file services and 1 MS Outlook web server.o Supervise 5 highly skilled technicians. Trained 10 network personnel and over 40 unit support personnel in creation of operational DMS Exchange email servers and workstations. Increased continuity of messaging system. o Setup Internet Information Server to support additional Outlook Web Access server in four hours. Configured Domain Name Server to allow round-robin approach for accessing 2 OWA servers increasing redundancy and reliability. Maintained 17 network servers with 99.9% availability rate for both SIPRNet and NIPRNet. o Configured more than 200 systems for Defense Messaging System transition from AUTODIN. Trained over 300 users; transferred more than 200 unit accounts to receive messages. First in Pacific Air Force (PACAF) to complete DMS 3.0 Gold upgrade.o Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.o Perform ongoing performance tuning, hardware upgrades, and resource optimization as required. Configure CPU, memory, and disk partitions as required.o Maintain data center environmental and monitoring equipment and ensure the most cost-effective and efficient use of servers.

Master Of Science - Ms, Information Assurance And Cybersecurity With A Specialization In Network Defense With Honors

B.S., Information Systems - Security

Associate Of Science (A.S.), Information Technology