Chuck Fraley Email & Phone Number

Melbourne, Fl, Us

Reston, Virginia, Us

Reston, Virginia, Us

Cybersecurity support Team Lead to DoD agency, provides RMF SME level expertise to DoD organizations. Includes ACAS and SCAP scanning review, analysis, and remediation/mitigation for vulnerability identifiers, and DISA STIG compliance. Works with technology area teams (e.g., Windows, Linux, Networks, etc.) to resolve findings. Assists senior agency executives with navigating the RMF process, by providing SME level consulting. Provides cybersecurity and RMF support to official and internal CCRI assessments.

Falls Church, Va, Us

Contributes senior level cybersecurity engineering, Defensive Cyberspace Operations, and RMF expertise to the Mission Defense Team (MDT), 45th Space Communications Squadron, Patrick AFB, FL.

Falls Church, Va, Us

Provided senior level cybersecurity engineering and RMF expertise to the Joint Surveillance Target Attack Radar System (Joint STARS) System Security Engineering Team. Contributions included:Delivered to government customer cybersecurity impact evaluations for security relevant changes to aircraft Platform Information Technology (PIT) systems, as the basis for eventual Authority to Operate (ATO) and Interim Authority to Test (IATT) decisions.Created Continuous Monitoring Plan and quarterly cybersecurity continuous monitoring report to government customer.Conducted review of selected security controls, answered control assessment procedures, and produced POA&M implementation responses.Provided cybersecurity relevant impact assessments to aircraft Architectural Analysis Report (AAR).Created cybersecurity impact evaluations to Joint STARS proposed Software Change Requests (SCR) from government customer.Established and implemented Xacta Continuum for program, as well as assisting with Xacta 360.Authored several cybersecurity process documents to eventual Technical Review Board (TRB) approval for use on Joint STARS Cybersecurity Integrated Product Team.Maintained Integrated Master Schedule (IMS) for System Security Engineering team.

Falls Church, Va, Us

Provided cybersecurity engineering expertise for JSTARS Recap proposal effort, including efforts to navigate JSTARS Recap through Risk Management Framework (RMF) to a favorable security authorization decision. Tasks/Responsibilities included:Cybersecurity architectural adviceVulnerability assessment scanning, penetration testing, vulnerability findings remediation and/mitigationApplication of applicable OS, data base, application, and network DISA STIGs, Application security testingDraft and review of System Security Plan and related documentation

Reston, Virginia, Us

Senior Cybersecurity Engineer to Joint Land Component Constructive Training Capability (JLCCTC) program, Army PEO STRI, Orlando, providing senior technical security engineering and RMF support including:• Vulnerability scanning of JLCCTC incremental builds, using ACAS tool• Configuration/hardening of JLCCTC OS and application components, utilizing DISA STIGs• Remediation of ACAS findings• Preparation of RMF SSP’s, pursuant to security authorization decisions• Briefing of senior contract prime and Army PEO STRI leadership on status of RMF efforts

Reston, Virginia, Us

Contractor Team Lead for support of Navy IC agency's Defensive Cyber Operations mission, performing Tier 3 support, tools tuning, architecture design and review for defensive cyber operations posture, and special projects officer. Experience with filter and rule creation for HP TippingPoint IPS, McAfee Web Gateway and McAfee Email Gateway Also Line Manager for Leidos.

Delegated Authorizing Official (DAO) to National Security Agency (NSA), Technical Task Order (TTO) Lead of contractor DAO's, and TASC Section Line Manager. Conducts Discovery meetings, Technical Exchange Meetings (TEMs), and site accreditation visits. Performs Security Test & Evaluation (ST&E) and Certification Test & Evaluation (CT&E). Reviews System Security Plans (SSP) and supporting documents, including Security Concept of Operations (CONOPs), Configuration Management Plan, system and network architecture drawings, Privileged User Guides, and Contingency Plans. Reviews and analyzes vulnerability scan reports and make risk determination on findings. Generates Security Requirements Traceability Matrix (SRTM). Conducts final risk assessment to make an accreditation recommendation on behalf of the NSA AO, as well as reaccreditation recommendations. As TTO Lead for contractor DAO's assigned to NSA/TS3 - Accreditation and Risk Assessment, is a liaison between the TASC AXISS INFOSEC Program Office and TS3 SES grade customer. Briefs senior government customer personnel on state of TTO at monthly Program Status Review meetings. Identifies TTO staffing requirements, reviews resumes, conducts interviews, and makes hiring decisions. As TASC Section Line Manager, is responsible for supervising and leading company employees through annual performance reviews, timecard management, training & education assistance approval, dissemination of company news and policy, providing awards and recognition, and counseling employee performance issues.

Falls Church, Va, Us

DAO to IC customer. Information Systems risk assessments and accreditation decisions for an Intelligence Agency organization.

Melbourne, Florida, Us

Melbourne, Florida, Us

Key contributor to Certification & Accreditation (C&A) package for alternate data center, which was approved. Security architecture and hardening lead for Census Bureau's Field Data Collection Automation (FDCA) program, for the 2010 census. Authored several ISA's for this program, which allowed secure, external connectivity to other Census systems. Provided security impact analysis for system and software change requests, which enabled the secure implementation of system and software changes. Security Engineering Lead for Electronic Programs division of Intel Community geospatial intelligence agency. Security Lead for FAA Traffic Flow Management-Modernization (TFM-M) program. Responsible for the development of the Information System Security Plan give presentations at design reviews and technical interchange meetings, and provide overall security architecture oversight. As subcontractor on this contract, extended Harris' security engineering task from original January 2005 end date to September 2005 and beyond. Basis of Estimate (BOE) Additional duty as Team Lead for Software Engineering Test Tools (SETT) Modeling & Simulation team. Custodian for Security & IA teams' shared drive, resulting in removal of extraneous or duplicated files. Technical Baseline Review (TBR

Melbourne, Florida, Us

Key contributor to Certification & Accreditation (C&A) package for alternate data center, which was approved. Security architecture and hardening lead for Census Bureau's Field Data Collection Automation (FDCA) program, for the 2010 census. Authored several ISA's for this program, which allowed secure, external connectivity to other Census systems. Provided security impact analysis for system and software change requests, which enabled the secure implementation of system and software changes. Security Engineering Lead for Electronic Programs division of Intel Community geospatial intelligence agency. Security Lead for FAA Traffic Flow Management-Modernization (TFM-M) program. Responsible for the development of the Information System Security Plan give presentations at design reviews and technical interchange meetings, and provide overall security architecture oversight. As subcontractor on this contract, extended Harris' security engineering task from original January 2005 end date to September 2005 and beyond. Basis of Estimate (BOE) Additional duty as Team Lead for Software Engineering Test Tools (SETT) Modeling & Simulation team. Custodian for Security & IA teams' shared drive, resulting in removal of extraneous or duplicated files. Technical Baseline Review (TBR

Performed Certification & Accreditation (C&A) on DoJ systems, to include registration, CONOPS, System Security Plan (SSP), and vulnerability testing using ISS and DISA scan tools. Conducted security application evaluations (i.e., media forensic scan tools, security monitoring programs/tools, anti-spyware programs), assessment and vulnerability testing on Windows and UNIX based systems. Efforts resulted in client being able to intelligently decide whether or not to purchase specific software applications, proceed with/modify/eliminate custom GOTS applications, as well as identifying network/systems/host vulnerabilities. Current in state-of-the-art in network/information systems security. Conducted penetration testing of networks, hosts, operating systems, hardware, and applications using COTS, GOTS, freeware, and custom tools. Task Lead for Independent Verification and Validation (IV&V) of PDA data extraction/forensic analysis programs. Findings and recommendation provided to client after IV&V of one COTS PDA forensic application resulted in client deciding not to acquire this product. Developed test plans, procedures, and test cases for media scan forensics. Provided defense-in-depth measures and recommendations, with knowledge of commercial, government, and freeware tools. Information Systems Security Officer (ISSO) at primary work site. Provided network, system, and security administration functions. Performed incident response functions as needed, including alerting of possible network probes, trojans, and attacks, primarily through log enabling and analysis. Site expert on all aspects of security involving corporate and client assets and responsibilities. May 2003 August 2003

Performed Certification & Accreditation (C&A) on DoJ systems, to include registration, CONOPS, System Security Plan (SSP), and vulnerability testing using ISS and DISA scan tools. Conducted security application evaluations (i.e., media forensic scan tools, security monitoring programs/tools, anti-spyware programs), assessment and vulnerability testing on Windows and UNIX based systems. Efforts resulted in client being able to intelligently decide whether or not to purchase specific software applications, proceed with/modify/eliminate custom GOTS applications, as well as identifying network/systems/host vulnerabilities. Current in state-of-the-art in network/information systems security. Conducted penetration testing of networks, hosts, operating systems, hardware, and applications using COTS, GOTS, freeware, and custom tools. Task Lead for Independent Verification and Validation (IV&V) of PDA data extraction/forensic analysis programs. Findings and recommendation provided to client after IV&V of one COTS PDA forensic application resulted in client deciding not to acquire this product. Developed test plans, procedures, and test cases for media scan forensics. Provided defense-in-depth measures and recommendations, with knowledge of commercial, government, and freeware tools. Information Systems Security Officer (ISSO) at primary work site. Provided network, system, and security administration functions. Performed incident response functions as needed, including alerting of possible network probes, trojans, and attacks, primarily through log enabling and analysis. Site expert on all aspects of security involving corporate and client assets and responsibilities. May 2003 August 2003

Global, Us

Lead for Testing and Security for the Enterprise Management portion of the Enterprise Service Center (ESC) of NIMA's GeoScout contract. Responsibilities include the drafting and finalizing of test plans, test procedures, test schedules, test summaries, and test reports. Also responsible for coordinating the certification and accreditation (C & A) of the migrated enterprise network monitoring applications, which includes Remedy, SMARTS, SupportSoft, and Concord E-Health. Additional duties include filling in as the Program Managers deputy, specifically in terms of contract increment scheduling.

Registration Authority (RA) for the Army's PKI certificate issuance and revocation program directorate; Army PKI Key Recovery Agent (KRA); Defense Message System (DMS) Army Regional Directory Service (ARDS) Manager CONUS. Provides high level system engineering support for all theater Directory Systems Agent (DSA) and Administrative Directory User Agent (ADUA) products including software installation, configuration, and maintenance, which is a total of approximately 120 managed servers (the largest distributed X.500 directory domain in the Federal government); Manage access controls on the Master DSAs to the hundreds of users who are mastering their data on the same platforms; Establish and maintain DSAs within or outside the established domain; Provide general system administration support for the Getronics DII High Assurance Directory Guard; Maintain Deployed/Tactical Master DSA directory and assist Deployed organizations with DSA; Provide technical training to the customer, as required, to include both formal lecture and demonstration/performance; Assist all Site Administrators in X.500 troubleshooting.

Arlington, Virginia, Us

Master Of Science - Ms, Network Security

B.A, Management

A.A, Business/Management