Alan Lundy-Ponce, Csm Email & Phone Number

Arlington, Va, Us

Task Lead, Secure Cloud Business Applications (SCuBA) service; supporting CISA, the Cybersecurity and Infrastructure Security Agency.Leadership and oversight of 10-person PMO team supporting critical open-source Microsoft 365 and Google Workspace security service, used widely and publicly available via GitHub and PowerShell Gallery.As America's Cyber Defense Agency and the National Coordinator for Critical Infrastructure Security and Resilience, CISA leads the national effort to understand, manage, and reduce risk to the cyber and physical infrastructure that Americans rely on every day.

Fairfax, Va, Us

Supporting the US Department of Homeland Security

Herndon, Virginia, Us

Senior Security Officer on team providing security oversight for 9 Health and Human Services Centers for Medicare & Medicaid Services AWS cloud-based systems in an Agile environment.Member of HHS Cybersecurity Automation Program (HCAP) team within the HHS Office of Information Security providing technology solution development across the Department to improve cybersecurity visibility, efficiencies, and standardization.

Washington, District Of Columbia, Us

Member of team providing technology services to the Legal, Risk, Audit, Communications & Marketing, and Compliance & Ethics departments:• Managed vendors, development, ops, and technical support teams to deliver leading edge solutions to meet business customers' requirements, primarily within a Wintel environment.• Oversaw and executed full software lifecycle, from requirements gathering to testing and deployment to maintenance and upgrades to application retirements.• Worked with business owners to understand and define project scope, vision, and requirements.• Analyzed and translated business requirements, working with the technical team to develop and document system requirements and design. Informed the senior project manager about key decisions, risks, and ongoing status of requirements activities.• Documented requirements using activity flow diagrams, swim lanes, system context diagrams, use cases, user stories, and clear, detailed functional and technical system requirements and specifications to support the project scope.• Conducted reviews with business and development teams to achieve understanding and sign-off of scope and requirements from both sides. Facilitated defect review meetings with both teams during testing phase.• Managed and participated in pre-production data loading with business and development teams for Issue Management (ISM) MetricStream GRC release, including project planning, requirements definition and documentation, data mapping, tool development, and unit, system, and UAT testing. Conducted training of user and production support teams.• Lead multiple Single Sign-On integrations between third party cloud-based applications and Fannie Mae's LDAP authentication. Liaison between vendors and developers and business customers for all project activities from kickoff to deployment and end-user support.• Technologies include: MetricStream GRC, Tableau, AD Summation, Remedy, SAML, Netcool, PLANit, DIAMS iQ, SharePoint, Agile, Visio

Arlington, Virginia, Us

Provided tier 4 Windows desktop support to the U.S. Patent and Trademark Office for COTS and custom applications on 12,000 PCs:- Enforced cybersecurity policies and USGCB requirements.- Discovered and eliminated network security risks.- Used ActiveRoles Server to administer Active Directory.

Fairfax, Virginia, Us

Consulted clients seeking government validations for their COTS hardware and software IT security products:- Performed detailed design analysis of products against security standards, including Common Criteria and FIPS 140-2.- Worked with product engineers to develop an understanding of their product, providing security-relevant design consulting.- Developed technical documentation as evidence to support evaluations, including detailed descriptions of security features, design architecture, development life cycle, product testing, and security flaw identification and resolution.- Collaborated with testing labs, vendors, and cryptographic providers to resolve issues with product testing and to ensure successful product certification.- Represented Corsec on the NSA/NIST Virtualization Technical Community for Common Criteria standards.

Arlington, Virginia, Us

Lotus Notes, Java, JavaScript, Lotus Domino, Microsoft Access, Microsoft Exchange

Arlington, Va, Us

- Led technical and editorial operations of 4 award-winning educational websites.- Managed production of all website deliverables. SEO, social networking.- Led open-source software selection and implementation for CMS, bug-tracking, forums, and e-commerce platform.- Utilized Google Analytics to drive strategic department-wide decision making and to report statistics to funders, company executives, and staff.- Conducted user-based testing to continually improve websites' usability.- Managed 7 direct reports.

Pittsburgh, Pennsylvania, Us

Managed development of JSP-based geospatial websites for FEMA/DHS. Oversaw entire development cycle: requirements gathering, use case creation, software development (including managing subcontractors), testing, online help and user guide creation, website deployment, Web-based training, customer support, and ongoing maintenance.

Washington, Dc, Us

JSP, Java, SQL, HTML, JavaScript, Oracle Portal, Solaris, Oracle 9i

Sunnyvale, Ca, Us

Architected and led development of "Powered by Visto," Visto's B2B initiative. Managed 3 major "Powered by Visto" projects to integrate Visto's Web-based communication technology into websites of a start-up and 2 large corporations. Recruited and managed team members. Met with customers to design systems and plan development, integration, QA, and release cycles. Developed and tracked project plans. Directed cross-functional teams to produce prototypes and final deliverables.

Java, CGI, JavaScript, HTML

Java, JavaBeans

C++, Open Class, OS/2

Bachelor Of Science (B.S.), Computer Science

Bachelor Of Arts (B.A.), Economics

Graduate Studies, Computer Science