Carlos Anderson Email and Phone Number

Monitor AAO’s applications and environments to include local, remote, virtual and cloud-based assets.Hands-on technical position that responds to security incidents including gathering, analyzing and presenting forensic evidence for cyber malware and intrusions.Perform data analytics seeking, identifying and confirming cyber threats, risks and vulnerabilities to both application and network environments.Perform risk analysis of proposed capabilities resulting in specific technical recommendations for improving security and/or mitigating cyber risk to the supported Lines of Business.Support agency IT Governance, Risk and Compliance and Audit Activities.Gather any control deficiencies identified during control development for POA&M consideration.Identify and analyze issues resulting from control assessments and audit reports that require remediation activities.Support Audit finding analysis, and collaborate with SME’s and perform research to identify possible solutions.Work with ISSPO to identify POAM needs and organize POAM development process.Collaborate with subject matter experts and Stakeholders to develop milestones.Maintain the IRL, update and report on periodic basis.Monitor the IRL actions and ensure the timely completions of the action, prioritize based on risk and escalate if necessary.Organize POAM and Milestone development, IRL review sessions, and status update meetings, and document meeting decisions and actions.Conduct periodic review of Milestone progress, analyze the pending tasks, and prioritize work with POA&M and Milestone Owners.Review outputs from POA&Ms to assess completeness and make recommendations for additional work needed or POA&M closure.Assist with security impact analysis, risk assessments and acceptance process.Support the PM by providing information for status reports, status briefings, schedules, project plans, etc., both in written and oral form.

Respond to information security incidents and involves analysis, mitigation, remediation, and documentation of incident reports.Provides effective communication and recommendations for preventative measures.Experience with tools such as Celebrite to perform triage, live data acquisition, and targeted data collection. Experience with EnCase, FTK, CyFIR, or similar forensic analysis platforms.Experience performing digital forensics on macOS and iOS systems.Knowledge of Monitoring (SIEM) and Detection (EDR)Provide focused services for NASA Langley customers as part of the extended NASA AEGIS program.Lead team members, and provide subject matter expertise in cybersecurity-related disciplines.Meet, work, and provide reporting with customer team leaders and mission teams.Perform deep-dive, incident response-oriented forensic analysis on media identified in potential security incidents.Collect, analyze, and properly preserve digital evidence from our client's laptops, desktops, servers, and cloud assets.Ensure appropriate tracking and handling of events to meet audit and legal requirements.Perform proactive analysis and reporting of cyber threats and security anomalies.Monitor for alerts from security tools and respond with an intelligence-driven, investigative analysis approach.

*Process database copies and run script for server restarts.*Managing accounts, network rights, and access to systems.*Researched previous cases, troubleshot client upgrades, conducted functional tests and recreated client scenarios in a test environment.*Engage proper business unit leads and assist in outage calls with all impacted parties for Critical Incident and System Outage analysis and resolution with the internal Critical Incident Response Support organization*Supported Development and Quality Assurance teams in testing major releases related to Enterprise eTime prior to deployment and verification of defect fixes post deployment.*Utilize HP Sitescope to track patterns in client systems to discover timeframe for critical events*Handled end to end analyzation of proposed service change requests with prioritization meeting strict and tight client timelines*Create, analyze and present reporting to Senior Management, team results metrics using Siebel CRM*Experience with information security policies, standards, industry best practices, and frameworks (ISO 27K, NIST 800-53 rev 4, FISMA, etc.*Leveraged SIEM tool Splunk to run queries against the database to research and troubleshoot client cases to bring forth resolution. *Closely monitored client database on the server to verify the client is running without interruption.

*Assisted the Agency Program Coordinator (APC) of the Government Travel Charge Card with the followings; monitoring delinquency, return check, non-travel activity and weekend holiday activity reports, deactivating travel cards of departing personnel; assist new applicants with request forms and maintaining files of all cardholder activity.*Provided guidance and assistance to personnel on regulations and procedures pertaining to travel and transportation matters; both domestic and foreign.*Organizing and retrieving computerized data, generating reports of data, reviewing data for inconsistencies, and referring to appropriate area for completion.*Performed accounting support functions such as reconciling invoices; reviewing Centrally Billed Account (CBA) unmatched transactions; reviewing bills for payment; reviewing and processing Individually Billed Account (IBA) application requests; perform error check and delinquency reporting and analysis; review outstanding accounts and work with customers to resolve issues; prepare and maintain periodic routine or ad-hoc reports relative to travel or accounting functions.*Extensive knowledge of the Joint Travel Regulations, the Defense Travel System (DTS), Centrally Billed and Individually Billed Accounts, and reconciliation with official accounting records (i.e., STARS).*Ensured the requirements for travel to support mission and related technical programs are effectively and economically accomplished.

*Answered user inquiries regarding computer software and hardware operation to resolve problems.*Assisted registered customers unable to correctly enter their registered username and/or password for login: authenticate the customer’s identity before using an internal administrative application tool to provide usernames and/ or temporary passwords.*Answered questions and resolve computer problems for clients via telephone and electronically. *Aided concerning the use of computer peripheral, hardware and software, including printer installation, word processing, electronic mail, and operating systems.*Maintained and enforced security needs of an organization, strict account management security controls.*Ensured proper documentation of all accounts assigned to an individual, including privileges, permissions and data access rights assigned to each type of account.*Verified that user accounts are assigned, and that everyone has only the necessary accounts assigned to perform his or her job.*Serve as primary client contact regarding incoming support requests.*Answers calls to the Customer Support Desk and accurately captures information on all service requests.*Manage and resolve incoming customer support requests that may consist of application questions or problems in the area product functionality, troubleshooting, and bugs/enhancement!