David A. Email & Phone Number

San Diego, California, United States

• Developed Security Control Assessment Plan to conduct security assessment and coordinated meetings with control owners and other stakeholders.• Coordinated documents System Security Plans (SSPs), reviews and uploads supporting security artifacts and evidence, generates risk reports, and facilitates continuous monitoring process for authorized systems.• Review System Security Plan (SSP), Configuration Management Plan (CMP), Contingency Plan (CP) and other security policy documentation.• Using eMASS, maintain up-to-date status of all security controls, enhancements, and control correlation identifiers (CCIs).• Assess security controls, Security Technical Implementation Guides (STIGs), and Assured Compliance Assessment Solution (ACAS) scans.• Compiling and submitting A&A packages for IA security control assessor (SCA) review and assessment• Worked on both classified and unclassified networks, including transferring files from unclassified to classified networks. • Supports the System Information System Owner (ISO), with establishing, maintaining, and tracking the security plans from eMASS in accordance with the RMF process as documented at the RMF Knowledge Service, and produce the five artifacts described in the system owners guide at all classification levels. • Ensure security policies, procedures; recommendations comply with FISMA, NIST, Organizational guidelines and technical best practices.• Participates in the development and maintenance of system security plans and contingency plans for all systems under their responsibility.• Develop a variety of Assessment & Authorization deliverables including System Security Plan (SSP), Security Assessment Report (SAR), Contingency Plan (CP) and POA&M for review and approval for Authorization Official. • Monitor and conduct Security Control Assessment to ensure all controls meet security requirements as stipulated in the SSP and NIST SP 800-53 Rev4.

San Diego, California, United States

• Hands-on experience on implementing Cloud Solutions using various AWS Services including EC2, VPC, S3, Glacier, EFS, AWS Kinesis, Lambda, Directory Services, Cloud Formation, Ops works, Code Pipeline, Code Build, Code Deploy, Elastic Beanstalk, RDS, Data Pipeline, DynamoDB, Redshift etc.• Develop and maintain documentation related to PCI compliance, including policies, procedures, and security plans.• Collaborate with cross-functional teams to implement security controls and measures to protect payment card data.• Coordinate with external auditors during PCI assessments and assist in remediation efforts.• Conducted regular security audits and monitored network traffic to detect and respond to security incidents.• Collaborated with IT teams to implement security patches and updates to mitigate vulnerabilities.• Migrating from On-Premises Infrastructure to AWS Cloud.• Configured and managed various AWS Services including EC2, RDS, VPC, S3, Glacier, Cloud Watch, Cloud Front, and Route 53 et• Configured various performance metrics using AWS Cloud watch & Cloud Trial• Responsible for Creating AWS IAM Users, Policies, Groups etc.• Establish program control processes for mitigating security risks and supporting periodic audits and assessments.• Developed and updated security authorization packages in accordance with the Agency’s requirement in compliance with FedRAMP.• Created and updated the following Security Assessment and Authorization (SA&A) artifacts: FIPS 199, Risk Assessment Report (RAR), System Security Plan (SSP), Configuration Management Plan (CMP), Contingency Plan (CP), Contingency Plan Test (CPT), Security Control Baseline, E-Authentication, Security Test & Evaluation (ST&E), System Assessment Plan (SAP) System Assessment Report (SAR) and Plan of Action & Milestone (POA&M).• Prepared Security Assessment and Authorization (SA&A) packages to ascertain that management, operational and technical security controls adhere to NIST SP 800-53 standards.

Coronado, California

• Participated in security tool implementation, integration, and performance evaluation.• Analyzed system events, security alerts, and network activities.• Provide security design and impact analysis for enterprise operations and solutions.• Assisted in various assessment activities including A&A security control assessments.• Managing the enterprise infrastructure of the System Security team, such as configuration of File Integrity Monitoring systems, Data Loss Prevention (DLP) toolsets, enterprise Antivirus solutions, and endpoint encryption.• Cloud Software-as-a-Service (SaaS), and/or a Hybrid Cloud environment. Responsible for the setup of the Azure environment for the customers. Planned, designed, and implemented Azure cloud solutions/systems architecture• Experience in SOC (Security Operation Center) to facilitate strong planning as per security protocol needed Analyse main Steps in IT Governance &Familiar with Cyber Security Process and ISO/NISI/ANSI Standard.• Conducted technical information security and assurance concepts to non-information security individuals to improve overall security awareness for organization.• Involved and responsible for deep packet inspection with experience of Wireshark, Solarwinds and Tcpdump.• Advanced knowledge and familiarity with the following including but not limited to, within the areas of compliance, security standards, framework, audit and legislative regulations: National Institute of Standards and Technology (NIST) 800 series, DIACAP, Risk Management Framework (RMF), DSS Assessment and Authorization Process Manual (DAAPM), Joint Special Access Program (SAP) Implementation Guide (JSIG),Federal Risk and Authorization Management Program (FedRAMP),Service Organization Control (SOC) types (Type1, 2, and 3 reports), Common Criteria (CC), Federal Information Security Management Act (FISMA),• Experience in SOC team delivery using security analysis, investigations, reporting, Mitigation, and tuning efforts.

San Diego, California, United States

• Lead security assessments of customer systems and systems audits. • Evaluates IT systems involving software, hardware, configuration, and proposed changes to ensure IT security posture is in compliance with existing information security policies and regulations.• Collects evidence to support implementation of system baseline security controls and performs analysis on evidence to ensure compliance with the systems security plan and risk management framework designs.• Develop Security Control Assessment Plan to conduct security assessment.• Coordinate and schedule kick-off meetings for the A&A process for each system.• Schedule interview meetings with control owners and other stakeholders.• Review System Security Plan (SSP), Configuration Management Plan (CMP), Contingency Plan (CP) and other security policy documentation.• Versed in PCI-DSS, HIPAA, ISO-27001/ 2, NYSDFS, GDPR, COBIT, CIS Controls, and ABA Cybersecurity compliance regimes.• Experience with network monitoring with SIEM IBM QRadar and Wireshark, Information Security & Network security configuration and f-unctions.• Design, implementation and management of network base McAfee DLP 5000 series (25 appliances) by deploying at the access layer for monitoring and analysing data flow logs of the sensitive content including deployment of McAfee DLP • Develop Security Assessment Reports (SAR) to support accreditation package.• Work with system engineers to assemble accreditation packages, including SSP, SAR, POA&Ms, etc.• Review vulnerability scans and perform analysis of results.• Troubleshooted 24 Programmable logic control (PLC) manufacturing units’ line• Reprogrammed (PLC) computers to reset production line.• Reconstructed 15 power panels to 480volts. • Designed and constructed parts for plastic gloves manufacturing line.• Installed 8 air compressors to assist production line. • Implemented schematics and blueprints of foreign equipment to operate and assemble. Installed 28 logic switches

Master Of Science - Ms, Cybersecurity And Information Assurance

Bachelor Of Science (Bsc), Electrical And Computer Engineering