Bruce W. Email & Phone Number

Vienna, Virginia, Us

Air Force Cyber Resiliency Office for Weapon Systems (CROWS)Leadership and Cybersecurity Management • Leader, CROWS Technology Working Group • Directed a team of 35 members to advance and secure CROWS technology, ensuring compliance with security protocols and standards. • Leader, CROWS Software Tools Integrated Product Team (IPT) • Managed a team of 30 in developing and integrating secure software tools, enhancing the overall cybersecurity posture. • Leader, Cyber Focus Team (CFT) Engagement Metrics IPT • Led an award-winning team of 45 members, implementing robust cybersecurity metrics and engagement strategies, significantly improving cyber defense and risk management. • Leader, CRITERIA Project • Collaborated with CSIAC to develop the Systems Security Engineering Cyber Guidebook (SSECG). • Provided strategic cybersecurity recommendations to the DoD community, influencing policy and best practices. • Managed a team of 10, successfully navigating complex cybersecurity challenges and ensuring project deliverables.Cybersecurity Expertise and Strategic Support • Creator, Cyber Resilience Engagement Metrics Application • Developed a comprehensive application covering over 1000 Weapon System Programs, leveraging Business Intelligence Platforms and Databases to enhance cyber resilience and operational security. • Cyber Resiliency Support Team (CRST) Liaison • Served as the key liaison for Weapon Systems Directorates HB, HN, and NC3, offering expert support and guidance to bolster system resilience against cyber threats. • Subject Matter Expert in Cybersecurity • Provided specialized cybersecurity expertise across departments, driving the development and implementation of robust security practices and protocols.• Judge, MassChallenge & Member, Hanscom Innovation Support Team• Evaluated emerging cybersecurity technologies, identifying innovative solutions and contributing to the advancement of the cybersecurity field.

Beavercreek, Oh, Us

Air Force Cyber Resiliency Office for Weapon Systems (CROWS)Leadership and Project Management:• Leader of the CROWS Technology Working Group, overseeing 35 members.• Leader of the CROWS Software Tools Integrated Product Team (IPT) overseeing 30 members.• Leader of the Cyber Focus Team (CFT) engagement Metrics IPT with 40 members, an Award-Winning Integrated Product Team.• Leader of the CRITERIA Project, collaborating with CSIAC (The Cybersecurity & Information Systems Information Analysis Center) to map out Systems Security Engineering Cyber Guidebook (SSECG) and providing recommendations to the DOD community. Managed a team of 10 members.Awards and Recognitions:• Selected as Large Group of the 1st quarter 2021 by AST and AFLCMC/EN-EZ.• Winner of the AFLCMC Large Engineering Team Annual Award (2021) at the CROWS level.• Awarded ARS Employee of the Quarter Q1 2021.Cybersecurity Expertise and Support:• Created Cyber Focus Team (CFT) Cyber Resilience Engagement Metrics Application covering over 1000 Weapon System Programs using Business Intelligence Platforms and Databases.• Member Special Projects Team, evaluating emerging Cyber Security Technologies.• Cyber Resiliency Support Team (CRST) Liaison for Weapon Systems Directorates HB, HN, and NC3, providing support and guidance on systems' resilience.• Subject Matter Expert in Cybersecurity, offering expertise to other departments.• Judge for MassChallenge, evaluating Emerging Cyber Security Technology.• Member of the Hanscom Innovation Support Team.

Burlington, Massachusetts, Us

Leadership and Project Management: • Established and managed comprehensive Corporate and Federal Vulnerability Management Programs, enhancing organizational security posture. • Led Information Security Engineering and Compliance initiatives for the Federal Environment, including achieving and maintaining FEDRAMP certification. • Key member of the Cybersecurity Operation Team, overseeing prevention, detection, and response strategies to mitigate cyber threats. • Directed a dedicated team of 15 engineers, addressing and resolving all findings from the Annual Pentest conducted by a third-party, ensuring continuous improvement in security practices.Cybersecurity Expertise: • Utilized advanced cybersecurity tools including Splunk, Application Allow Listing, Endpoint Detection and Response (EDR), Advanced Threat Detection, Data Loss Prevention (DLP), Malware Analysis, Incident Response, Risk Management, and Threat Hunting to protect organizational assets. • Played a pivotal role in the Cloud Security Team, contributing to the architecture, engineering, and implementation of cloud security solutions across AWS, Azure, Office365, traditional on-premises infrastructure, and GOV Cloud. • Managed third-party integrations with the Security Operations Center (SOC) and supported ongoing SOC efforts to maintain a proactive security posture.Support and Advisory Role: • Acted as a Subject Matter Expert, providing expert guidance on cybersecurity matters across all departments.• Spearheaded DevSecOps initiatives, adhering to OWASP Top 10 principles, and conducted Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Interactive Application Security Testing (IAST), code reviews, and threat modeling.

New York, Ny, Us

Cybersecurity Leader & Project ManagerLeadership and Project Management:• Information Systems Security Manager• Led efforts to safeguard digital assets by overseeing the development of System Security Plans (SSP) within the Risk Management Framework (RMF).Managed a team responsible for technical writing, compliance reviews, and coordination with US Government agencies, ensuring alignment with security standards and regulations.• Security Training and Awareness Leadership• Directed the L3 SSG Security Training and Awareness team, achieving superior ratings during DSS inspections.• Successfully re-accredited two assets through the RMF process in under two months, demonstrating efficiency and expertise in security compliance.Cybersecurity Expertise:• Comprehensive Compliance Management• Conducted thorough reviews of computer security requirements, ensuring compliance with NISPOM, ICD 503, JSIG, RMF, and other government policies, thereby maintaining a robust security posture.• Information Systems Security Engineer (ISSE)• Applied expertise in various security tools and technologies to strengthen the organization's cybersecurity infrastructure.Project Implementation and User Education:• IT Project Management• Managed critical IT projects, including upgrading high-side networks and onboarding three networks with government-sponsored tools, enhancing the organization's operational security.• User Education and Briefings• Conducted training sessions on system and program procedures to improve colleagues' understanding of safeguarding digital assets, fostering a culture of security awareness.Recognition and Collaboration:• Subject Matter Expert Recognition• Acknowledged for cybersecurity expertise, providing ongoing guidance to various departments on cybersecurity matters, contributing to informed decision-making and enhanced security protocols.

Carlisle, Massachusetts, Us

Leadership and Cybersecurity Management:• Cybersecurity Operations and Incident Response• Recognized as an enterprise-wide subject matter expert in cybersecurity operations, incident response, proactive cyber defense, threat intelligence, and vulnerability and risk management.• System Security Planning and Compliance• Developed and maintained System Security Plans (SSP) to ensure IT systems were operated, maintained, and disposed of in accordance with SSPs.• Managed access to IT systems, maintained configuration management documentation, and conducted periodic reviews to ensure compliance with security policies.Project Implementation and Compliance Management:• Policy Design and Implementation• Specialized in designing and implementing security policies and solutions across operational and customer-hosted environments, enhancing the overall security posture of the organization.• Compliance Inspections and Audits• Assisted with compliance inspections and reviews, conducted information system audits, and provided training and briefings on security best practices.Technical Expertise and Problem Solving:• Technical Proficiency• Demonstrated strong understanding of IT operating systems, hardware, and software tools. Displayed technical experience in securing multiple operating systems and following up to solve problems effectively.• Regulatory Compliance• Worked daily with NISPOM Chapter 8, NIST, ICD 503, JAFAN 6/3, and DCID 6/3, ensuring technical experience and skills were applied to meet and exceed regulatory requirements.Recognition and Contributions:• Subject Matter Expert• Acknowledged for expertise in cybersecurity, providing guidance and leadership across departments to safeguard digital assets and ensure compliance with industry standards and government regulations.

Lexington, Ma, Us

Summary:• Highly skilled Information Assurance Officer at MIT Lincoln Laboratory, responsible for providing information systems security support to several National Security independent programs. Proven track record in developing and maintaining System Security Plans (SSP) and ensuring compliance with industry standards and government regulations.Leadership and Cybersecurity Management:• System Security Planning and Compliance• Developed and maintained System Security Plans (SSP) for the Laboratory's IT systems, ensuring they were operated, maintained, and disposed of in accordance with the SSPs.• Ensured configuration management was maintained and properly documented, and managed access to IT systems, ensuring users were aware of their security responsibilities.• Compliance Reviews and Audits• Conducted periodic reviews to ensure compliance with SSPs, resolved special security issues, and interacted with Laboratory management to uphold security standards.Technical Expertise and Problem Solving:• Technical Implementation and Compliance• Demonstrated technical expertise in implementing security requirements outlined in SSPs, assisting with compliance inspections and reviews, and conducting information system audits as required.Project Implementation and Regulatory Compliance:• Policy Impact and Implementation• Helped determine the impact of new security regulations, requirements, and policies, implementing them as necessary and providing security guidance in the design and construction of secure facilities.• Security Guidance and Training• Recognized for providing security guidance and training, playing a crucial role in protecting the laboratory's digital assets and ensuring compliance with industry standards and government regulations.

Master'S Degree, Criminal Justice And Criminology

Bachelor'S Degree, Information Technology

Bachelor'S Degree, Criminal Justice And Criminology