Bob Nicholson Email & Phone Number

Ellicott City, Md, Us

Round Rock, Texas, Us

Round Rock, Texas, Us

Round Rock, Texas, Us

Round Rock, Texas, Us

Business Development Executive within Federal Civilian with a concentration in Space & Research. I continue to support other civilian agencies in our Healthcare and Citizen Services areas as well driving solutions to real world problems. I have expanded that visibility by contributing to the larger efforts in advocating for collaborative work across our strategic lines of business, partner ecosystem, and every organization assisting our government in providing better service back to us as citizens.Accomplishments Include:- Managing a $1B+ total value pipeline to identify and qualify program business opportunities- Development of CRM intake process for best practice implementation in Deltek and SFDC CRM tools- Driving increased revenue streams within teamed opportunities- Driving increased value in the overall solution being delivered- Building effective strategies for account teams to execute against- Presenting on various topics with uniquely created content and talk track- FY19 Business Development Executive of the Year

Baltimore, Md, Us

Established the Division of Technical Operations within the agency’s Office of Information Security. As IT Security Director leveraged 10 years of hands-on data center experience to analyze operations to develop strategic programs to bring higher levels of maturity to the agency’s IT Security processes and capability to respond to the ever changing threat landscape. Recruited, staffed, and trained a 5 person management team, 17 additional full-time employees, and 15 contractors. Managed strategic proposals from creation through effective budget execution.Accomplishments include:Designed and manage the agency Enterprise Penetration Testing Program including automated enforcement of high risk vulnerabilities and 100% mitigation within the first 30 daysManage the Continuous Diagnostics and Mitigation program in support of the Information System Continuous Monitoring and Ongoing Authorization initiativesManage the lifecycle’s Software Development Security Program including static code analysis and web application penetration testingManage the DHS shared services program including external vulnerability testing and Einstein programDesigned and manage the agency Data Loss Prevention ProgramManage the Incident Response, Incident Response Testing, and Incident Reporting ProgramsManage the asset, platform, software, and vulnerability analysis and reportingDesigned and manage the agency Hardware/Software Authorization Process for approval of new deploymentsManage the agency IT Security Exception Process to approve known deviations from configurationsDesigned and manage the Wireless Assessment ProgramPerform many security architect and technical evaluation functionsPerform many analysis and project management functionsManage 7 multi-million dollar IT services contracts, establishing roles for 15 contractorsBrief executives and outside authorities on behalf of the agency

Baltimore, Md, Us

Advised on various IT Security initiatives including the formalization of the agency’s Security Operations Center.Accomplishments include, but not limited to:Drafted the agency’s initial Identity and Access Management Strategy and RoadmapManaged the Trusted Internet Connections (TIC) rollout and compliance programEstablished and managed organizational budget in support of TIC and Security Operations CenterParticipated in Federal workgroup to establish DNSSEC initiativeAnalysis and proposal of Network Access ControlsBriefed executives and outside authorities on behalf of the agency

Baltimore, Md, Us

Architected many IT Security solutions to establish centralized IT Security operations.Projects and strategy examples included:Network Access Control Strategy/Roadmap (non-COTS, root cause analysis strategy)Trusted Internet Connections Compliance StrategySecurity Operations Center Planning RequirementsGovernance, Risk and Compliance Enterprise Strategy/RoadmapMAC Address Network InventoryDeveloping a system to house security controls mapped to Federal standards both current and futureDeveloping a system to house central repository for Documented Accepted RiskDeveloping a system to house audit findings and mitigation strategiesVendor roadmap negotiations to ensure the agency remains in line with upcoming technologiesProposing strategies for ensuring Federal alignment for overall awareness, suitable reporting, and compliance to Federal initiativesProposing progression strategies for increasing efficiency in continuous monitoring of all agency systems and infrastructuresTechnical analysis of bleeding edge technologies such as data loss prevention, full packet capture and meta data storage for forensic analysis and session recreation, enterprise log management including aggregation and correlation, intrusion prevention and othersBudget management including procurement strategies and executionBriefing executives and outside authorities on behalf of the agency

Baltimore, Md, Us

Selected to join the agency's first Intrusion Protection Team. Beginning with 4 members and a small annual budget I designed the agency’s first Intrusion Detection deployment that launched the insight, future expansion of budget, multiple deployments of various IT Security infrastructures for scanning and compliance monitoring now known as the agency's Security Operations Center.Architected several enterprise solutions that are still in place today including, but not limited to:Fully Automated Vulnerability Scanning Process with Automated Prioritization AnalysisHand written Vulnerability Portal with Single Sign-on and Role-based AccessEnterprise Intrusion Detection ServicesEnterprise Database ScanningAntivirus Deployment StrategyAgency Incident Response ProceduresHost-based Intrusion PreventionSecurity Event Management including correlation and aggregationNetwork Behavioral Anomaly DetectionNetwork InventoryUnix Compliance Scanning Methodology and Architecture

Baltimore, Md, Us

I began my Federal career in IT Security supporting a range of projects exemplifying my abilities to analyze quickly, propose mitigation techniques, and to present ideas to multiple audiences.

Round Rock, Texas, Us

I began my IT career as a network administrator migrating the MD State Comptroller staff from dumb terminal to a PC environment with 3270 emulation.