Amy Nicewick, Cissp, Ccsp, Ceh Email & Phone Number

Arlington, Va, Usa

As the Acting Chief of the new Technology Office, I drive the development of processes, governance, and organizational structure to ensure the establishment of new office capabilities. I oversee the budget, contract, and personnel decisions, as well as all aspects of planning, development, monitoring, conduct, and evaluation of technology activities and projects.

Arlington, Virginia, United States

As the Chief of JCDC's PMO, I oversaw the SLTT SOC | ISAC program, the Cyber Liaison Officer program, and JCDC's Employee Engagement program.

Arlington, Virginia, United States

As the Chief of Acquisitions and PMO, I oversaw the execution of JCDC budget and contracts, as well as managed the Cooperative Agreement that directs the activities of the MS/EI-ISAC program.

Arlington, Virginia, United States

As the Chief of Websites and Multimedia, I led the development, review, and publication of content on the us-cert.gov and cisa.gov websites.

Arlington, Virginia, United States

As the Chief of Content Management, I directed the activities of a team of technical editors, graphics designers, web developers, and distribution professionals for review, publication, and dissemination of cybersecurity information for federal and critical infrastructure partners.

Herndon, Va

As the Founder of SalusSec, LLC, I developed and launched a Business-to-Business security certifications company that provides online automated security solutions, in-depth security training, high-quality consulting, and expert project management to assist businesses in navigating the complex and difficult Common Criteria information security certification process. I designed and developed a creative software solution to successfully guide vendors through creation and publication of required Common Criteria evaluation documentation. As part of the web application, CCAdviser, I implemented a robust online training platform to assist customers in understanding the security evaluation process and executing the certification requirements. CCAdviser is also ideal for evaluation labs both as a training tool for junior evaluators, and as an efficient time-saver for experienced evaluators.Find out more about SalusSec and CCAdviser at salussec.com.

Herndon, Va

As the Chief Operating Officer for Corsec Security, I directed the operations of the largest Common Criteria, FIPS 140-2, and UC APL certifications consultancy in the world. Identified and implemented changes needed to prepare for rapid growth per an aggressive corporate goal of a $20 million-plus increase in revenue. Expanded and developed staff, shepherded projects, strengthened processes, executed quality standards, and delivered gross margins of 65% or more. Refined project management and resource management procedures, and enhanced employee morale and commitment to corporate success. As COO, I was responsible for the delivery of services to customers, which included consultation on implementation of security controls and security assurance through Common Criteria, FIPS 140-2, and UC APL certification. As the company was in a growth cycle, my participation was central to the improvement of efficiency and effectiveness of the company’s information assurance consulting operations. In this role, I oversaw implementation of improved processes with regard to project management, quality review of deliverables, personnel management, and company communications. Throughout my tenure with Corsec Security, I worked with a wide variety of information technology products, such as Unified Threat Management appliances, Intrusion Detection Systems/Intrusion Prevention Systems, Firewalls, Data Loss Prevention tools, Large-scale Database appliances, and many other product types.

Fairfax, Va

As a Lead Security Engineer for Corsec Security, I guided a talented team of up to six security engineers while managing more than sixty customer projects, successfully advised clients on integration of security into their products, imparted quality oversight of company’s deliverables, and interfaced with Common Criteria and FIPS laboratory evaluators to ensure project success. Our customers demanded cost-effective solutions to their evaluation needs, so I ensured their evaluation projects moved forward efficiently and successfully.As a project manager, I successfully guided our customers through the Common Criteria and FIPS 140-2 evaluation processes, providing consultation on overall information security requirements such as security auditing, identification and authentication, security management, trusted channel/path, communications, access control, cryptographic operations, key generation/management/destruction, algorithm implementation, data protection, privacy, and resource utilization. I also directed security test plan design and execution, and vulnerability analysis and mitigation. I interacted closely with customers and third-party laboratory personnel throughout the evaluation process for each project, ensuring projects stayed on schedule and completed successfully. As a personnel manager, I oversaw the activities of up to six direct reports at a time, ensuring their compliance with company rules and providing mentorship in company processes. I instituted formalized employee review processes, and assisted in determining pay, raises, and bonuses. I also participated in hiring and firing decisions. I also oversaw the quality of the company’s deliverables, instructing my direct reports in how to improve their output. As a Sales Engineer, I provided technical assistance to the Sales team during multi-day client-site workshops, which were integral to bringing new business to Corsec.

Fairfax, Va

As a Security Engineer, I consulted on product design and tailored security certification documentation for multiple successful Common Criteria (overall information security standards) and FIPS 140-2 (cryptographic standards) evaluation projects. In this role, I developed evaluation documentation, interacted with lab personnel and customers, reverse-engineered products for analysis and testing purposes, and assisted with product testing. I analyzed the security functionality of customers' products, and provided guidance in how to improve the security posture of the products and the companies manufacturing them. I also developed test plans and assisted the vendors in completing the testing successfully. And I worked closely with lab personnel to ensure the vendor received feedback in a prompt and intelligible manner. I also worked closely with other engineers and my Lead Security Engineer to ensure my output was of the highest quality. As a consultant, I provided guidance to my customers in how to identify and mitigate vulnerabilities within their information technology products. As part of the evaluations, vendors were required to implement vulnerability prevention and mitigation processes in the development of their targeted products. Threat identification and response were integral to the development of the Security Problem Definition, as defined in the Security Target document of a Common Criteria evaluation. These vulnerability and threat identification and management activities in turn resulted in improved risk management programs by our customers.

Master'S Degree, Strategic Information And Cyberspace Studies, A

Ba With Honors, Psychology, Dean'S List

Post-graduate Coursework at other educational institutions in HTML/CSS, Javascript, Windows Desktop Support, Network+, A+ Troubleshooting.

Graduate Studies, Computer Science

Computer System Architecture, Formal Methods and Models

Graduate Studies, Computer Science

Design of Switching Systems, Programming and Data Structures, Discrete Structures for Computing