Analyzing vulnerability and compliance scan results obtained from ISSO and IACS to close POA&Ms. Provide support in reviewing the system plan, contingency plan, configuration management plan, risk assessment and concepts of operation (CONOPS). Develop Security Assessment Report (SAR) detailing the results of the assessment and created POA&MS for each of the findings within the SAR. Conduct system security assessments baselines in accordance with NIST 800-53 and DHS 4300A. Track FISMA scores and coordinate with ISSO's to ensure scores are maintained. Conduct FISMA compliant security control assessments to ascertain the adequacy of management, operational and technical privacy controls. Conduct continuous monitoring after authorization (ATO) to ensure continuous compliance with the security requirements.

Perform patch management process to ensure overall industrial control systems (ICS) security. Manage Altiris security agent in encrypting network servers and workstations and deploy software. Configured and harden systems for secure user environments. Conduct role base access control (RBAC) by restricting access to authorized users in an enterprise consisting of over 2,000 employees. Administer network communications for Cisco routers and switches. Conform to requested security changes (port security) allowing unused ports to be disabled. Responded to queries and requests for computer security information and reports. Prepare security reports to Transportation Security Administration (TSA). Develop and implement preventative maintenance plans to ensure network reliability and availability is monitored, managed, maintained, and operated per service level agreements. Perform tape backup. Possess complete knowledge of the company’s systems. Provided subject matter expertise (SME) to improve and update the security of the company’s computers.Develop Plan of Action and Milestones (POA&M) to assist TSA in identifying, assessing, prioritizing, and monitoring the progress of corrective efforts for security weaknesses/deficiencies/vulnerabilities found in programs and systems. Satisfied NIST and FISMA policy and standards for TSA customers.Submit Request for Change (RFC) for system configuration changes, new software release/version, Hardware upgrades, existing software maintenance/enhancement, and decommission of systems.Provide expert knowledge for Transportation Security Administration (TSA) customers.

Retired U.S. Navy