Anna G. Email & Phone Number

United States

Greater Atlanta Area

● Promoted within two-year timeframe after earning 7 security certifications and demonstrating the ability to lead and promote security objectives by limiting exposure to the network. Earned 9 certs in 3 years● Leading and maturing the vulnerability remediation management program by performing analysis of cyber security vulnerabilities, threats, and incident trends to understand root causes and propose counter measures mitigating risk, improving security and business processes across many platforms● Use investigation techniques to gather information, form an assessment, analyze risks and threats, then write proposals including recommendations to mitigate risks in the environment ● Experienced in penetration testing and risk/threat management ● Use penetration techniques to isolate and address weaknesses in applications● Track threats and vulnerabilities related to systems, applications, and infrastructure● Identify, track, and coordinate the management of vulnerabilities within systems, and services as required, ensuring timely development and execution of response and remediation plans● Familiar with DAST/SAST tools and code reviews● Guide and distribute work to security analysts to meet security objectives● Write security procedures for team members and application owners, ● Contribute to security policies adhering to HIPAA framework and security infrastructure● Work directly with developers and teams to ensure effective and secure development practices ● Participates actively in meetings providing insight and direction related to application and configuration security risks● Provide technical guidance and consultation, training, and assistance to application owners, about security policy and standards, remediation, regression testing and system architectures recommendations● Ensure execution of remediation plans to reduce legacy systemsEnvironment: Vulnerability Scanning tools, Firewalls, Metasploit, Nmap, Burp Suite Pro, HIPAA, PCI

● Wrote Risk Assessment outlining current and recommended security remediations based on OWASP Top 10 framework● Created security assessment with objectives, deliverables, and remediation processes for IT based on the FBI CJIS Security Policy● Managed security awareness program with training results at 98% completion rate and Health certification● Managed vulnerability program● Resolved and investigated security incidents with application/device historical information from Arcsight● Used problem solving skills to determine network and security issues with experienced background in network LAN/WAN support● Implemented Cisco Umbrella OpenDNS for Content Filtering● Reviewed security requests and Implemented changes in Cisco and Checkpoint firewalls● Consulted on implementation of security projects● Configured ASM policies on F5 for MNSure projectEnvironment: Tripwire, ArcSight, QRadar, Websense, Cisco Umbrella, Cisco ASA, Checkpoint Firewalls, HIPAA

Bloomington, Mn

• Senior Security Principal• Responsibilities included managing IBM's QRadar SIEM for log correlation and management• Worked on PCI and HIPAA compliance for logging and reporting• Created scans and reports using Tripwire’s Configuration Compliance Manager• SME for consulting with areas and creating policies, procedures and standards• Created process for firewall and data loss prevention changes and approved firewall changes• Implemented program for use of NIST configurations for device standards and CIS for Security Benchmarks• Created process for perimeter network filteringEnvironment: Cisco, Checkpoint, QRadar, Tripwire, PII, PCI, and HIPAA

Oakdale, Mn

• Configured Cisco ASA and Juniper firewalls• Managed RSA SecurID by assisting in managing RSA for token replacement, and management of user accounts• Managed enVision SIEM1. Created and managed reports and alerts for PCI compliance2. Managed configuration setup and operation3. Worked with teams to have device logs sent to envision• Used McAfee EPO for whole disk encryption and virus control• Setup configuration standards for devices in Tripwire’s CCM for configuration managementEnvironment: Cisco ASAs and Juniper firewalls, RSA enVision, OSPF, PII, FISMA, PCI

• Lead for managing thirteen firewalls• Converted over 30,000 lines of conduits to access control lists and implemented object groups on all firewalls for Cisco PIX to Cisco FWSM conversions for 6 firewalls• Reviewed and implemented solutions for network and application security• Assisted in creation of security policies relating to IT infrastructure• Reviewed security requests and Implemented changes in Cisco and Checkpoint firewallsEnvironment: Cisco switches and routers, PIX and FWSM firewalls, OSPF, HIPAA

Computer Programming Degree, Computer Programming

Networking

Education record