Angela Kearns Email and Phone Number

Lead Cyber Security for software development project in support of government agency using NIST 800-53 controls, CNSSI 1253, FIPS 199, NIST 800-137 and agency specific directives.-Develop Cyber Security documents (SSP, Disaster Recovery Plan, Information System Contingency Plan, Continuous Monitoring Plan, Security Control Traceability Matrix, Incident Response Plan, Information Security Architecture, Privileged User Guide, and Compliance Self-Test Results)-Closed Plan of Actions and Milestones (POA&M) liens by due dates-Submit requests for all software used by software developers-Provide input for Integrated Management Schedule (IMS) regarding Cyber Security tasks and activities-Track risks pertaining to Cyber Security-Develop briefings for Cyber Security (Program Management Reviews and others)-Perform monthly Vulnerability and Compliance scans. Provide reports to operations for remediation-Attend decision making meetings as Cyber representative (Engineering Review Board, Configuration Control Board, Risk Management Board, etc.)-Provide information and documentation into RMF workflow tool

Managed JWICS Assured Compliance Assessment Solution (ACAS) for DoD organizationProvided support for NIPR and SIPR ACAS implementations

Reviewed project designs and provided recommendations for secure implementation of new systems and upgrades to existing systems.

• Act as Deputy Team Lead for the Risk Management team of 9 contractors• Provide briefings for management on performance metrics• Perform architecture and DoD policy reviews of enterprise design projects• Perform implementation review of transition projects• Perform security reviews of new hardware, software and configuration change requests• Provide DoD policy and guidance in reference to customer requests• Manage access to the server that permits downloading software by exception• Review the exceptions for Security Technical Implementation Guide (STIG) requests• Perform network scans on enterprise network segments using Retina Network Scanner/ACAS Nessus• Perform server and workstation scans using SCAP Compliance Checker• Manage Vulnerability Management System (VMS) for organization to maintain US Cyber Command compliance• Review the USB exceptions for NIPR and SIPR requests• Perform review and approval of privileged account requests for SCI network• Review the CD write capability requests for SCI network users• Review and approve the Mark Center Conference Room connectivity requests• Work Remedy tickets and help manage queue for team

• Implemented Windows 2000/Windows 2003 Servers with latest security patches and Security Technical Implementation Guides (STIG)• Managed Vulnerability Management System (VMS) for 150+ unclassified and classified servers• Implemented IAVA (Information Assurance Vulnerability Alert), IAVB (Information Assurance Vulnerability Bulletin) and IATA (Information Assurance Technical Advisory) fixes to unclassified and classified servers• Implemented Information Assurance actions regarding security incidents• Provided documentation of current server hardware and software to maintain Configuration Management