Tony Rossi Email & Phone Number

Poulsbo, Wa, Us

Hollywood, Md, Us

Served as a Cybersecurity Manager at SMX, leading cybersecurity operations for classified government projects. This role involved overseeing the implementation of security protocols, managing risk assessments, and ensuring compliance with federal security standards for highly sensitive systems.• Directed comprehensive cybersecurity programs for classified government projects, ensuring alignment with NIST, ISO 27001, and FedRAMP security frameworks to protect sensitive and mission-critical data.• Managed security operations across cloud-based and on-premises environments, integrating advanced security controls to mitigate risks and ensure the security of classified systems.• Led cross-functional teams and coordinated efforts between government stakeholders, internal teams, and third-party vendors to successfully implement and maintain security controls across multiple workstreams.• Conducted regular risk assessments and vulnerability management initiatives to identify and mitigate potential threats, ensuring that all systems met government compliance requirements.• Developed and delivered security reports to senior management and government stakeholders, providing clear insights into security posture, risk levels, and the status of ongoing security initiatives.• Spearheaded the development and implementation of security solutions, reducing vulnerabilities by 40% and enhancing the overall security resilience of classified government systems.• Oversaw incident response for critical security events, ensuring timely detection, analysis, and mitigation of potential cyber threats within classified environments.This position required deep expertise in federal cybersecurity standards, strategic leadership, and the ability to manage complex security operations in high-security environments supporting national defense initiatives.

Seattle, Wa, Us

Served as the Information Security Lead responsible for securing cloud-based research platforms and sensitive data across the University of Washington’s Office of Research Information Services. This role required a strategic blend of technical expertise, leadership, and collaboration to ensure the integrity, confidentiality, and availability of critical research data.• Led the implementation and management of security policies for cloud-based research systems, ensuring compliance with regulatory standards such as NIST 800-53, NIST 800-171, and ISO 27001.• Managed security operations across a multi-cloud environment, integrating security controls to protect sensitive research data, including medical and government-funded research projects.• Directed risk assessments, vulnerability management, and incident response efforts to ensure continuous protection and monitoring of the university’s research platforms, reducing vulnerabilities by 35%.• Collaborated with cross-functional teams including IT, engineering, and research staff to design and implement security roadmaps, improving security posture and ensuring alignment with institutional goals.• Developed key performance indicators (KPIs) for security initiatives, providing regular progress reports to executive leadership and ensuring accountability for meeting security objectives.• Managed relationships with third-party vendors to ensure secure integration of cloud platforms and services, achieving successful security audits and compliance with federal and industry standards.• Delivered training programs for university staff on security best practices, enhancing awareness and reducing security risks in research environments.This position demanded expertise in security governance, cloud security, and collaboration with both technical and non-technical teams to protect the university’s critical research assets and ensure compliance with rigorous security standards.

Washington, Dc, Us

Served as the Cybersecurity Advisor for the Pacific Submarine Force, responsible for safeguarding the cybersecurity posture of mission-critical systems across a fleet of nuclear-powered submarines. This role required expert knowledge of cybersecurity frameworks, leadership in directing security operations, and ensuring compliance with DoD regulations to protect sensitive and classified information.• Directed comprehensive cybersecurity programs for classified and unclassified submarine systems, implementing security controls in line with NIST, FedRAMP, RMF, and DoD cybersecurity standards.• Managed risk assessments, vulnerability management, and continuous monitoring of submarine networks, ensuring the protection of critical data and communication systems against emerging cyber threats.• Led incident response efforts for high-priority cybersecurity incidents, coordinating with command leadership and technical teams to mitigate risks and restore secure operations promptly.• Developed and maintained System Security Plans (SSP), outlining the cybersecurity policies, procedures, and security controls to ensure the integrity and confidentiality of mission-critical information systems.• Collaborated with cross-functional teams, including IT, operations, and intelligence, to integrate cybersecurity strategies into the overall operational readiness of the submarine force, reducing vulnerabilities by 40%.• Implemented cloud-based security solutions for classified and sensitive communication systems, enhancing the overall cybersecurity posture by 50%.• Trained and mentored junior cybersecurity personnel in security best practices, incident handling, and compliance, building a highly skilled and mission-ready team.This role required strategic leadership, technical expertise, and a deep understanding of military cybersecurity protocols, ensuring the operational security and resilience of the Pacific Submarine Force in high-stakes environments.

Washington, Dc, Us

Served as the Information Systems Security Officer (ISSO) for the USS MISSOURI (SSN 780), responsible for ensuring the security and integrity of mission-critical information systems aboard a nuclear-powered submarine. This role demanded a unique combination of technical expertise, leadership, and the ability to navigate the high-stakes environment of military operations.• Led the implementation and management of security controls and protocols for classified and unclassified information systems, ensuring compliance with DoD standards, including NIST, FedRAMP, and RMF (Risk Management Framework).• Directed incident response operations, successfully mitigating security breaches and addressing vulnerabilities in real-time to ensure uninterrupted mission performance.• Oversaw the deployment of advanced security technologies, including intrusion detection systems (IDS), encryption, and access control measures, safeguarding sensitive national defense data.• Developed and enforced security policies, procedures, and operational controls, reducing security incidents by 40% and significantly improving the overall security posture.• Conducted rigorous risk assessments and vulnerability scans to ensure the resilience of onboard IT infrastructure, successfully enhancing system reliability and operational readiness by 30%.• Collaborated with cross-functional teams, including IT, operations, and intelligence, to drive a comprehensive security strategy that aligned with the critical objectives of the Submarine Force.This role required not only deep technical knowledge of information security but also the ability to manage and secure complex systems in one of the most challenging environments – a nuclear-powered submarine on active missions.

Washington, Dc, Us

Served as the Network Administrator aboard nuclear-powered submarines, ensuring the secure and reliable operation of complex communication and data networks critical to mission success. This role demanded advanced technical proficiency, quick problem-solving, and the ability to maintain high-level security standards in a high-stress, mission-driven environment.• Managed, maintained, and monitored the submarine’s network infrastructure, including routers, switches, and firewalls, ensuring secure communication channels and continuous system availability for mission-critical operations.• Configured and deployed secure network protocols, access controls, and encryption technologies to safeguard classified information and support real-time operational communications.• Performed routine network diagnostics, troubleshooting, and performance tuning to ensure optimal network performance, resolving technical issues under stringent time constraints and minimizing system downtime.• Collaborated with onboard IT and cybersecurity teams to implement network security protocols, defend against potential cyber threats, and maintain compliance with DoD and Navy security policies.• Conducted vulnerability assessments and patch management for network devices, reducing risks and ensuring the security and integrity of the submarine’s communication systems.• Provided technical support and training to submarine personnel on the operation and troubleshooting of network systems, improving the overall technical readiness and efficiency of the crew.This role required not only expertise in networking technologies but also the ability to work under pressure in a highly secure and mission-critical environment, ensuring the seamless operation of communication systems vital to national defense operations.

Washington, Dc, Us

Served as an IT Support Technician at the Commander Submarine Force Pacific (COMSUBPAC) Headquarters, providing critical technical support to ensure the smooth operation of IT systems and communication networks across the Pacific Submarine Fleet. This role required technical expertise, attention to detail, and the ability to support high-security, mission-critical operations.• Provided frontline technical support to senior military leadership, staff, and operational teams, troubleshooting and resolving hardware, software, and network issues in a high-paced, classified environment.• Maintained and managed secure IT systems, including desktops, servers, and communication equipment, ensuring continuous availability and compliance with DoD security protocols and procedures.• Supported network connectivity and communications infrastructure for both classified and unclassified systems, ensuring secure and reliable access to critical applications and data for submarine operations.• Assisted with system upgrades, installations, and configuration of IT equipment, ensuring all systems were up-to-date, secure, and functioning optimally.• Administered and maintained user accounts, permissions, and security access across a range of platforms, ensuring proper access control and system integrity within the headquarters environment.• Developed and provided technical training and support documentation for users, improving overall IT proficiency and minimizing downtime due to technical issues.• Collaborated with cybersecurity teams to maintain compliance with security standards, including NIST and DoD requirements, conducting routine system audits and vulnerability assessments.This position required a combination of hands-on technical support skills and an understanding of the security protocols necessary for maintaining the integrity and reliability of IT systems in a classified military environment.

Washington, Dc, Us

Served as a Fire Control Technician, responsible for the operation, maintenance, and repair of advanced fire control systems used to launch torpedoes and missiles on nuclear-powered submarines. This role required a high level of technical expertise, precision, and the ability to work under extreme pressure in a mission-critical environment.• Operated and maintained the submarine's complex fire control systems, ensuring the readiness and accuracy of torpedo and missile launching capabilities during both peacetime and combat operations.• Conducted routine testing, troubleshooting, and preventative maintenance of fire control software and hardware to ensure system reliability and operational accuracy.• Performed system calibrations and alignment procedures to guarantee precise targeting and firing solutions, safeguarding the successful execution of mission objectives.• Collaborated with sonar, navigation, and weapons systems teams to gather and analyze tactical data, integrating inputs from various sensors to generate accurate firing solutions for underwater and surface targets.• Assisted in the integration and deployment of new fire control technologies, conducting system upgrades and ensuring compatibility with other onboard combat and communication systems.• Provided technical expertise during combat exercises, simulating real-world scenarios to enhance the crew’s readiness and the fire control system’s operational capabilities.• Trained and mentored junior personnel on the operation and maintenance of fire control systems, enhancing overall team proficiency and readiness.This role demanded exceptional attention to detail, technical proficiency, and the ability to perform under pressure to ensure mission success and the effective defense of national security assets.

Washington, Dc, Us

• Trained in Navy recruit training command and Fire control technician "A" school, mastering service principles and technical skills for tracking hostile submarines and ships.• Developed leadership abilities and technical expertise in defense strategies.• Acquired hands-on experience in Groton, Connecticut, United States, at the US Navy base.

Master Of Science - Ms, Cybersecurity And Information Assurance

B.S., Computer Science

Associate Of Arts (A.A.), Mathematics