Responsible for providing security, risk, and vulnerability assessment of information systems and applications for Cloud and on-prem environments. Conducted threat assessments, code analysis, penetration testing, compliance, and security control analysis. Determine deviations from acceptable configurations, enterprise, or local policy, and develop or recommend appropriate mitigation countermeasures in operational and non-operational Environment.• Identified and resolved false positive findings in assessment results.• Produced vulnerability metrics related to identified vulnerabilities, remediation, and risk reduction.• Documenting process and procedures related to all areas of a threat and vulnerability management program.• Conducted vulnerability assessments on systems to verify findings.• Created and refined custom scripts to Automate repeatable tasks and increase productivity.

Directly responsible for maintaining the vulnerability assessment tools. Documented DISA STIGs applicable to each network environment for all Assured Compliance Assessment Solution (ACAS) implementations. Assess the current ACAS implementations and recommend changes for each of the networks. Documented the steps required to implement vulnerability management solution for each of the networks to include IP address, Fully Qualified Domain Name, and physical location of each component.• Reviewed security findings to ensure false positives are identified and documented. • Performed Security assessments on system to maintain compliance with federal and organizations standards.• Ensured security tools receive periodic updates from DISA/DoD Patch Repository or Tenable.

Responsible for performing System Administration services, installation, configuration, security, and overall management of all hardware and software assets. Ensured no interruptions of services affected business productivity. Provided senior management with monthly detailed reports of Current security findings. Installed and maintained Security tools, Linux distributions and windows operating systems. Configured and Managed Cloud (AWS, O365) systems and services.