Billy Reed Email & Phone Number

Douglasville, Ga, Us

Atlanta, Ga, Us

•Information Security Policy, Standard, and system hardening compliance lead to responsibility for maintaining 50(+) documents for the Bank. Created a new process that helped application and system owners have additional time to review and test controls. Additionally, cutting out Information Security overhead by converting to CIS benchmarks vs manually built documents. •Lead for FHFA, Internal Audit, pen test, and all other security assessments being conducted against the Bank.•Builds out materials and conducts multiple subjects during Security Governance Committee meetings held 5 times a year.

Charlotte, North Carolina, Us

• As a lead security consultant for the Trust but Verify (TbV) team, I assist the bank in performing third-party assessments on over 100 critical/high-risk vendors to ensure open security risks to the bank's data is addressed by vendors accessing or storing sensitive information reducing risk overall to the bank and our third parties.• Responsible for scheduling and coordinating the assessments and conducting onsite reviews of the vendors with over 150 in-depth questions in a two-day time frame using the ISO 27000 framework. I reviewed a vast number of different companies. My responsibility was to ensure that the information entrusted to our third parties was properly governed through policy and procedures, that critical tools for administering security were in a place like AV, DLP, PAM, Cloud security, and many others and walked through physical security controls and environments like data centers and warehouses that conducted business with Trust.• Additionally performed Due Diligence Assessments (DDA) for the bank utilizing tools security questionnaires from Know Your 3rd Party (KY3P), TruSight report, SOC Type2 reports, PCI compliance reports, ISO certs, and other company relevant data to provide Archer with answers to security questions and enter findings that may have come up in the security review.• Responsible for managing the records of my TbV and DDA audits by uploading documents and entering the applicable findings in the system of record Archer.

Charlotte, North Carolina, Us

Charlotte, North Carolina, Us

• A critical part of the Information Security program by performing liaison duties for 918 applications and their business/technical owners when communicating with Truist cyber discipline teams.• Ensures the Truist application portfolio retains at least a 90% compliance rating for all Truist 19 security requirements that span multiple disciplines like logging, IAM, and vulnerability scanning.• Crafted multiple working documents that increased team efficiency and improved business turnaround times by a few days.• Currently multitasking across multiple teams, ensuring all pre-production applications have no security risks open or unaccounted for in the software development lifecycle.

Atlanta, Ga, Us

Lead technician for issuing and the troubleshooting of RSA tokens to an IT workforce of more than 300 people.Established the Nessus vulnerability management program that led to an 86% drop in critical and highs findings within 3 months.Created more than ten Standard Operating Procedures (SOP) and responsible for the update of all network diagrams.Upgraded software versions, validated, or changed the passwords, on 192 VMware systems host, management, vSphere admin, and iDrac interfaces.

Atlanta, Georgia, Us

Directed security compliance as the DoA’s key IT security stakeholders through performing network analysis and managing approved changes that affect configuration items in the operations baseline for their information system. Conducted the first business impact analysis and cyber risk analysis to identify the current technology and architecture for vulnerabilities, and weaknesses in support of a 1-3-year cyber road map. Lead engineer for the DOA’s cyber security and overall risk footprint. Directing the vulnerability management program and transitioning from Rapid7 to standing up multiple Qualys scanners, implementing a stronger patch management process via Qualys, and reducing vulnerabilities within the organization by 50% within 8 months.Orchestrated the reorganization of the incident management process between DoE with key customers to include Dell Secure Works for SIEM monitoring. Streamlined the internal processes between all internal departments, which resulted in a 25% increase in efficiency for all reported incidents.

Atlanta, Georgia, Us

Provide the vision and strategies necessary to pass the yearly security audit conducted by Georgia Technical Authority (GTA) using NIST 800-53 CSF framework to implement new policies, processes, and procedures.Conducted a business impact analysis and established a 2-year security road map, resulting in an immediate savings of 10,000 dollars a year by removing three separate software license agreements in favor of one tool that supported multiple capabilities.Increased security compliance 20% establishing new security practices of ADHOC audits, artifact record keeping, and weekly senior leadership meetings.Lead vulnerability and incendint management manager limiting the exploits found in the environment.

Successfully designed the restructuring of over 1400 systems for multiple network systems in eight months. Efforts included but were not limited to updating McAfee epos to the latest version. Remote installation of McAfee agents, antivirus software, and (DAT) files. Deploy Data Loss Prevention (DLP) software and policies. Install and configure DLP Discovery Server to scan shares for sensitive data and ensure it is stored encrypted in an appropriate server location. Implement BitLocker encryption with Management of Native encryption from McAfee. Led DECAL’s Vulnerability and Risk Management Process and provided the highest compliance standards. Conducts the Information Assurance and Vulnerability Management (IAVM) and Plan of Action and Milestones (POA&M) program to reduce the organization's cyber threats.Acted as the project lead to certify the DECAL Systems to achieve NIST CSF certification and accreditation in 2019. Provided communication and guidance to the IT Director regarding NIST security standards. Responsible for writing all Policies and Procedures for DECAL against the NIST CSF framework to ensure we meet compliance standards reviewed by third-party audits.

Us

Directed five team members responsible for Home Depot’s anti-virus solution resulting in Windows server/workstation, MAC, and Linux servers remaining within 98% compliance on nearly 200,000 assets. Communicated pending ticket issues with McAfee account manager to keep tickets on-track and progressing forward, as well control the team task tracker to communicate problem escalation, report resolution to initiatives from senior directors.Orchestrated task and provided final approval to the creation of McAfee policy modification, software upgrades/installation, and new client/server task creation on the ePO.

Mobile, Alabama, Us

Successfully designed the restructuring of over 1800 systems for multiple network systems in six months, achieving 95% compliance for endpoint security key performance indicator (KPI). Efforts included but not limited to updating McAfee ePO to the latest version, remote installation of McAfee agents and antivirus (DAT) files, and rolling out Data Loss Prevention (DLP) policies to restrict the use of external or portable hard drives. Provided the necessary communication and guidance to the Cyber Security Director regarding multiple security frameworks as a direct result this action lead to SSI's environment receiving HITRUST and NIST CSF certification and accreditations in 2018.Charged with the responsibility of leading the Vulnerability Management Program of all SSI Systems through the Qualys vulnerability and compliance scanner. Maintains the systems Risk Management Score to perform at a 2.5 or lower performance indicator. Conducted the Information Assurance and Vulnerability Management (IAVM) and Plan of Action and Milestones (POA&M) program to reduce cyber threats.

Us

Led DISA's development and adherence to the organization's security process, and standard operating procedures (SOP) to meet ever-changing policy requirements set from Information Assurance Support Environment (IASE), DISA headquarters, DIACAP, and RMF information assurance (IA) programs.As a direct result of being the organization liaison, the teams involved in more than 20 vulnerability assessments in three years, maintain a 0% fail rate during any third-party review.Vital in the Administration and Auditing of ePolicy Orchestrator on DISA information systems. Respond (as appropriate), to events, and assist with performing engineering analysis of current configuration and proposed configurations. Ensure compatibility with IASE policy standards and resolve any issues keeping DISA from achieving 100% compliance. Perform daily reviews of systems to ensure assigned functions are properly performing as designed as we as reporting on the daily/weekly system health. Assists with system audit log reviews as required, and the population of Asset Management information. Additionally, was a member of the security team that ran the Nessus Vulnerability scanners for the NIPR and SIPRNET.

Montgomery, Alabama, Us

Responsible for all servers meeting STIG (Security Technical Implementation Guide) compliance, to include Operating systems and web applications, by utilizing localized Security Readiness Review (SRR) scripts, and Information Assurance Support Environment (IASE) security checklists to meet a 94% compliance rate against known vulnerabilities.Built an Active Directory policy to automatically STIG servers with more efficiency once a server joins the domain, saving more than 21 hours of manual labor per server review.Fulfilled daily duties to track, monitor the open-closed status, and create documentation against security and non-security Information assurance vulnerability alert (IAVM) notices. Apply recommended IAVM actions and use the Remedy ITSM system to open tickets and assign them to appropriate System Administrator IAVM and STIG mitigations that cannot be resolved by server security. Work with Program Management Office and Information Assurance Management to develop Plan of Action and Mitigations (POA&Ms) for use in VMS to mitigate open findings that are not remediated immediately.

Montgomery, Alabama, Us

Managing a daily ticket queue for incoming problems on the network. Trouble shoot, determine the problem, and fix issues that arise on desktop and laptop computers. Tasks also include doing multiple computer and printer refreshes weekly.

Falls Church, Va, Us

Replacing legacy IBM assets with updated Hewlett Packard Northrop Grumman purchased CPU's, monitors, and possible hardware for each user required to perform they daily duties.

Tampa, Fl, Us

Ensure that the Network Operations Center (NOC) is running efficiently by monitoring, testing, troubleshooting issues throughout the Metro DC area. Providing detailed analysis of production environment (websites, Extranet, networks, Remedy etc.) uptime for the United States Air Force.

Tampa, Fl, Us

Completing the SIPRNet refresh for all USAF customers in the Pentagon. Lead technician for VIP computers, laptops, printers, and scanners.

Maintaining employee personnel (Up to 20), providing support as a shift staging lead, troubleshoot data problems, maintaining Quality Assurance (QA) standards of 100% customer satisfaction.

Completing 1300 installations in allotted time with 100% customer satisfaction.

eir one to three support for the TECOM organization managing over 1500 computers on a Windows 2000 environment. Assisted in roles such as Network Engineer, Sever admin, Security Analyst.• Was directly responsible for computer given to the General of TECOM, but also helped other Marines with basic computer issues in a help desk type capacity.• Worked as the procurement lead for whole of the Marine Corps keeping track of software licensing and approving or disapproving purchases based on GOTS/COTS list approved by the USMC that may already be authorized to install or same or similar function.

Bachelor Of Science, Cybersecurity And Information Assurance, Cybersecurity And Information Proteciton.

Certification, Computer And Information Sciences And Support Services

Certification, Computer And Information Sciences And Support Services