Christopher D. Searcy Email & Phone Number

Washington, Dc, Us

Rockville, Md, Us

Herndon, Va, Us

South Jordan, Ut, Us

South Jordan, Ut, Us

• Configured and monitored industry-leading technologies (Tenable Security Center) to continuously identify security and compliance vulnerabilities within enterprise technology assets• Analyzed information and communicated with management team to develop strategies for minimizing network complexity and increasing security• Implemented and monitored baseline configurations based of CIS guidance in order to document known deviations and to better detect unknown changes or anomalies to the system

Falls Church, Virginia, Us

• Performed De-identification of sensitive data per HIPAA's Safe Harbor method using the Informatica Test Data Management and PowerCenter tool• Used knowledge and understanding of data privacy and protection laws and regulation to ensure data sets were properly de-identified according to HIPAA regulations and various state laws• Configured rules to mask PII and PHI to comply with the 18 identifiers from Safe Harbor in order to replicate data sets for testing and quality improvement• Configured and deployed Nessus scanners and Tenable Security Center to continuously identify security and compliance vulnerabilities and track remediation efforts

Ashburn, Va, Us

• Provided management and maintenance of GSA security authorization, POA&M tracking and remediation process, Continuous Monitoring, Privacy, and Security Training programs• Developed and maintained GSA security, privacy, and continuous monitoring policies and procedural guidelines• Supported FedRAMP as well as security audit coordination efforts• Updated GSA’s Control Tailoring Workbook from NIST SP-800-53 Rev.3 Guidelines to NIST SP-800-53 Rev. 4 Guidelines.

Falls Church, Virginia, Us

• Reviewed and implemented changes/updates to Information Security related compliance items required by FISMA and A-123 audits• Created and maintained SSPs, ISRAs, and PIAs for CMS programs• Configured and monitored industry-leading technologies (Tenable Security Center) to continuously identify security and compliance vulnerabilities within enterprise technology assets• Analyzed information and communicated with management team to develop strategies for minimizing network complexity and increasing security• Used understanding of risk management principles and concepts to categorize systems, select, implement and assess appropriate controls, get the system authorized and then monitor authorized systems • Created a Web Application Penetration Test Plan to identify variety vulnerabilities• Maintained access assurance strategy by ensuring user access rights and activities were compliant with policy, security and business objectives• Provided technical knowledge and guidance in IT security best practices, risk analysis and mitigation planning associated with securing CMS programs (MSPSC/COB&R, ReMAS, COBSW) • Produced senior level security direction for various CMS programs ensuring that services provided were in accordance with CMS security regulations• Created and maintained FISMA artifacts for various CMS programs for FISMA Attestation and Authorization to Operate (ATO) submittal• Used Web Application Penetration tools (Burp Suite, Zap) to identify weaknesses and vulnerabilities prior to application release dates• Led the management process for creating and managing POA&Ms for various CMS programs designed to track, document and mitigate findings/weaknesses discovered by the independent assessor for the both projects resulting in closing findings

Bachelor Of Science (Bs), Information Systems Management

Web Application Penetration Testing And Ethical Hacking

Business Administration