Process corporate-wide Security Findings through Microsoft’s risk process. Communicate withFinders (Red Team), Owner (Engineers), Approvers (Managers), Risk Reviewers, and manyothers. Work entire Risk Register progress to make sure progress is made, issues don’t getstalled, and issues are fixed.Support sensitive FedNet CUI risks, creating presentation materials for high-level managementreview, collate data from across the company.Reduce overdue Security Findings through user communications, escalations, clarifyingissues, and helping users.Migrate Department Wiki to Sharepoint while updating information and processes.Train new employees.

Sole reviewer/approver for firewall rules for a 130K employee corporation. I apply policy andrisk-based assessments to internal and external traffic that crosses security boundaries toprotect sensitive information and prevent data exfiltration.Applied CIS review/approval for policy deviations. Hands-on experience reviewingenvironments (Internal labs, IFZs, Customer-facing, tunnels) for adherence to policies andsecurity best practices. Document risks and work with Programs and Security Engineering todisposition those risks. This involves consulting a variety of tools like Splunk, internalvulnerability scanners, firewall logs, etc.Team Lead for web unblock requests, which entails interfacing with external contractors andinvestigating websites for risk. Prevent LM users from visiting questionable or threateningwebsites.Department PoC for company-wide engineering review boards. Provide CIS input and approvalson Security Engineering projects. Review and evaluate network and security solution designsand proposals to help address security issues as well as risk mitigation controls/methods.Assist CIRT investigations by providing Firewall, Traffic, and User information.Interact with a wide range of end-users, business area Information Security Officers, CIRT, CIS,NetOps, and external entities. Provide technical and security information, approvals, denials,and project planning.Received 4 SOAR (Serving Others and Achieving Results) awards for above-and-beyond customer support. Responsible for weekend 24/7 support, countless urgent requests, and very high-profile Director-level approvals.Lead trainer for new employees in my department.Perform User Acceptance Testing and CIS feedback as we implemented two major softwaremigrations for internal tools.Monitor and work 6+ ticket queues for a variety of user or system issues.Participate in preparing Lockheed for CMMC certification.

Responsible for 26 Information Systems, including all paperwork, audits, weekly securityauditing, and users. Averaged 4 Change Requests per week that requires ISSM approval.Supported seven Government and Corporate audits of the systems. Regularly interacted withProgram Management, Corporate Inspection Teams, and DCMA auditors.Created Authorization to Operate (ATO) documentation for a brand new IS per NISPOM. This ISgot DCMA approval and was shipped to the location it would operate in.Hands-on validation of security settings, new hardware and software, and new users.Perform weekly employee security training.Perform vulnerability assessments for software, hardware, and networking devices.

Audited and tested the RSAIIA program through three major test events, six major releases, anddozens of bug-fix releases.Create comprehensive test procedures from requirements, often numbering in the hundreds ofsteps and proving 40+ requirements per procedure.Interact closely with Air Force Auditors, demonstrating procedures and negotiating passing oftests.Coordinate a test with 20 participants and 50+ witnesses.Hands-on testing of OS, hardware, network, database, and security for servers and workstations.Troubleshoot OS, hardware, network, database, and security errors to facilitate ProblemReports. Perform regression testing to verify Problem Report resolution and current installationperformance.

Desktop Support. Blackberry support. Phone switch support. Software and hardwaretroubleshooting. Network troubleshooting.Install COTS and custom software on servers and workstations.Work independently on problems while keeping other techs up to date on resolutions.Direct support of program management.