Bammun Timothy Email & Phone Number

Abuja, Federal Capital Territory, Ng

United States

Over the span of four weeks, I engaged in an externship facilitated by Extern (Paragon One) and Thematic. During this program, I identified and curated a list of 10 promising leads and crafted tailored outreach emails highlighting Thematic's unique value proposition for each. Additionally, I delivered a concise presentation of business insights and recommendations to Thematic within a four-minute timeframe. Through the vibrant Slack community cultivated during the externship, I had the privilege of connecting and collaborating with numerous talented individuals whose invaluable assistance was integral to my success.

United States

Perform vulnerability assessment, ensuring risks are assessed and appropriate actions are taken to mitigate or resolve each.Conduct IT controls risk assessments including reviewing organizational policies, standards and procedures, as well as providing advice on their adequacy, accuracy and compliance with industry standards.Collaborate with other IT and security teams to ensure the timely resolution of security incidents, and working closely with incident response teams to contain and eradicate security threats.Compile, write, update, finalize, produce, and support activities for IT Security Common Control Catalogs and related documentation including, but not limited to, Security Plans or other documents required.Compile, write, update, finalize, and produce all FISMA documentation and associated artifacts as required by Client in a manner compliant with all Federal security requirements and policies.Ascertain all FISMA documents are updated within 6 months of a new policy release. Manage the Interconnection Security Agreements for all systems, including creation, tracking, and vetting.Review all ISSO provided documentation for accuracy and relevancy, provide follow-up to ISSOs to ensure documents are properly completed.Prepare Security Assessment and Authorization (SA&A) packages to ascertain that management, operational and technical security controls adhere to NIST SP 800-53 standards.

Lagos, Lagos State, Nigeria

Created and updated the following Security Assessment and Authorization (SA&A) artifacts; FIPS 199, Security Test and Evaluations (ST&Es), Risk Assessments (RAs), Privacy Threshold Analysis (PTA), Privacy Impact Analysis (PIA), E-Authentication, Contingency Plan, Plan of Action and Milestones (POA&Ms).Prepared Security Assessment and Authorization (SA&A) packages to ascertain that management, operational and technical security controls adhere to NIST SP 800-53 standards.Performed vulnerability assessment, making sure risks are assessed and proper, actions taken to mitigate them.Conducted IT controls risk assessments including reviewing organizational policies, standards and procedures and providing advice on their adequacy, accuracy and compliance with industry standards.Conducted the IT Risk Assessment and documented key controls. Developed, reviewed and evaluated Security Plan based on NIST Special Publications 800-18. Investigated possible security breaches identified through review of audit reports and follows up accordingly with departments / management Prepared and reviewed C&A package for Information Systems.

Lagos Island, Lagos State, Nigeria

Monitored Security Events and Alerts: Reviewing and analyzing security logs , alerts, and reports generated by various security tools, such as Intrusion Detection Systems (IDS), Firewalls, and Antivirus Software, to ensure there are no external intrusions, attacks, and hacks.Incident Triage and Response: Responsible for prioritizing incidents to determine severity and potential impacts and those to be escalated for immediate remedy or isolation.Responsible for providing customer support to internal and external customers by answering security-related questions and assisting with basic security-related issues. This includes resolving clients tickets relating to the defense of software systems, networks, data centers, and hardware.Configured and troubleshot firewalls with best practices related to Antivirus, Web Filtering, Application Control, Intrusion Detection System (IPS), and Virtual Private Network (VPN).