David Weeks Email & Phone Number

Naples, Campania, Italy

Accelerated ATO Achievement: Successfully obtained Authorization to Operate (ATO) for the MCSS Poland system in 14 months, significantly ahead of the U.S. Navy average of 18 months, by streamlining processes and implementing efficient risk management and compliance strategies.Risk Management Framework (RMF) Support: Provided comprehensive support for the RMF process for Facility Related Control Systems (FRCS), including achieving and maintaining Authorization to Operate (ATO). Expert Experience with eMASS, VRAM 2.0, ACAS, Tenable.IO, HBSS, and ensuring compliance with STIG and SRG through implementation, validation, and necessary system scans.Industrial Control Systems Security and Risk Mitigation: Assessed and mitigated technical security and operational risks for industrial control system enclaves, including identifying and tailoring security control baselines, maintaining Security Plans and POA&Ms, using ACAS for scans and reports, and developing RARs. Expert experience with HBSS, ACAS, SCC, STIG Viewer, and eMASSTER for compliance documentation, supporting RMF audits and assessments, and ensuring continuous monitoring and cybersecurity testing throughout the system lifecycle.Network Engineering and Control Systems Administration: Provided expert network engineering and control systems administration, including configuration, maintenance, management, and cybersecurity compliance for FRCS, IT, and networking components. Supported CYBERSAFE Criticality Analysis for FEC EURAFCENT, ensuring accurate artifact review and updates, execution of system and component grading, stakeholder briefings, training development, project schedule maintenance, and modification of CA tools and policies to enhance enterprise-wide knowledge and expertise.

Naples, Campania, Italy

Instructed computer science courses to undergraduate and graduate students. These courses include but are not limited to the following:o CMIT 499D - Interconnecting CISCO Networks to over 250 students.o CMIT 366 - Windows 2000 Professional to over 300 students.o CMIT 367 - Windows 2000 Server to over 250 students.o CMIT 376M – Windows 2000 Network Infrastructure to over 250 students.o CMIT 377M – Windows 2000 Active Directory Admin to over 250 students.o CMIT 320 - Security Plus Certification to over 250 students.o CMIT 265 – Networking Essentials to over 300 students.o CMST 100E - Introduction to Networks to 60 students.o CMST 100F - Web Page design to 60 students.

Naples, Campania, Italy

European region FRCS ISSE for 28 different Facility Related Control Systems (FRCS) located in Spain, Italy, Africa, Bahrain, Romania, Poland, and Iceland. This includes but is not limited to Power Plants, Waste Water Treatment Plants, Water Treatment Plants, Reverse Osmosis Water Purification units and Electronic Security Systems.Risk Management Framework (RMF) Compliance: Supported system authorization through RMF, including categorization, security control selection, implementation, and continuous monitoring, ensuring systems receive Interim Authority to Operate (IATO) or Authority to Operate (ATO).Security Control Implementation and Assessment: Developed and implemented Information Security Continuous Monitoring (ISCM) strategies, performed security scans, and supported the creation of Security Assessment Reports (SAR), Risk Assessment Reports (RAR), and System Security Plans (SSP).System Administration and IT Service Management: Conducted system administration, configuration, maintenance, and troubleshooting for cybersecurity-related systems, and followed ITSM frameworks for service strategy, design, transition, operation, and continual improvement.

Naples, Campania, Italy

Execute, manage, and maintain RMF processes in eMASS for various site packages throughout the RMF life cycle.Manage and maintain site workspace in the Navy VRAM system. Ensure that POA&M items are generated, documented, and tracked. Upload and associate multiple ACAS scans into VRAM to ensure system compliance.Review system STIGs and document non-compliant findings to generate and track POA&M items. Manage POA&M entries to ensure vulnerabilities are sufficiently addressed with NSWCPD.Work with ISSM and system validator to ensure compliance with all Navy IT & cybersecurity policies, and NIST special publication series for RMF.

Naples Area, Italy

Responsible for the administration and day to day systems operations of the CNE-C6F Maritime Operations Center (MOC).Responsible for creating and maintaining several artifacts of the Risk Management Framework (RMF) process for the C6FMOC Local Area Network Accreditation.Provides keyboard to antenna support for the following critical C2 systems: GCCS-J, GCCS-M, MOC Domain, AIS, ADSI, MIPS, RADMERC, JRE, USBICES, LMMT, MCCIS, JTT-M, C2BMC, SEAGULL, VMS, SAFE, MTC2, CENTRIX (CMFC, CMFP, NIDTS, and GCTP), PRSS, JADOCS, OPCW, NSITE, and VSE.Support Information Assurance to include adherence to IA policies operations of IA related systems to include HBSS configuration and ACAS scanning for C2 systems.Provides on-site engineering and technical support for the integration of IT hardware and software upgrades incorporated into the MOC.

Naples, Campania, Italy

Maintain and administer the HBSS operations for the European theater computing systems - Install HBSS agent and modules to servers and end user machines (modules:ABM,ASE,DLP,HIPS,PA,VSE).Maintain and administer the European ONE-NET computing systems to meet the DoD mandated security requirements and directives.Create custom Firewall policies and work with Cybersecurity and CERT teams to identify, configure and apply host based IPS signatures to protect against zero-day threat.Create firewall exclusions based on customer demand and the C&A approval process.

Naples, Campania, Italy

Lead TNOSC Naples Tier III Engineer responsible for Exchange, Active Directory, Blackberry, Webshield, ProxyMR, GPOs, OCSP (CLO), DNS, Terminal Services, DNS, WINS, DHCP, IAS, DMZ, and VPN services for all of Naples, Souda Bay, Sigonella, and Rota. Researched, developed and spearheaded a ONE-NET Enterprise wide server firmware and driver update initiative – improving overall server availability for mission critical applications.Active Directory Subject Matter Expert: Responsible for an enterprise Windows 2003 Active Directory environment. This entails the administrative and operational health of DNS, WINS, DHCP, and replication services for over 200 servers.Tier III Information Assurance (IA) support: Utilize test scripts, Security Technical Implementation Guides (STIGs), and technical publications to configure and test applications. Define system test requirements, create test plans and procedures for various types of testing, oversee test efforts, analyze results, and generate reports for upper echelons.Operation of Intelligent Agent Security Manager (IASM) and Host Baseline Security System (HBSS) applications to prevent, identify, and analyze vulnerabilities. Using analysis of packet data, implementation of SNORT rules, generation of application white-lists and HBSS policies, closed findings significantly hardening the overall network security posture.Using forensics applications such as EnCase, Helix, BackTrack3, and Window Forensic Tool Kit (FTK), conduct investigations in conjunction with Naval Criminal Investigative Services (NCIS) and the National Security Agency (NSA), locate malicious files, use reverse engineering applications (Bintext, PE Reader), disassemble exploit in attempt to discover malicious actions being taken. Implement preventative measures to defend enterprise against further exploitation.

Naples, Campania, Italy

Researched, Designed, and developed a custom enterprise network monitoring system. The system monitors and produces reports of all the MSCEUR network infrastructure and MSCEUR network interests. This custom application spans 5 distinct programming languages and enables the N6 department instant access to critical data to ensure optimal network performance.Supported Global Command & Control Systems (GCCS-M) at MSC for 4 years. Responsible for patching and maintaining Solaris servers and assisting in GCCS-M track configuration.Developed 15 custom Visual Basic Microsoft Outlook COM-ADD-INs interfacing with SQL 2000 server to produce a Knowledge Management solution for the Commander Submarine Group Eight staff. These custom applications enabled a rapid and effective way of sharing data and streamlined information flow.Ported custom ASP and VB.NET code that was developed for the Intranet project to Microsoft SharePoint 2003, creating numerous custom web parts and web applications.Lead developer for the CSG8 Intranet project. The Intranet is driven by a Microsoft SQL 2000 relational database containing over 190 separate tables with user interfaces spanning 7 distinct computer languages which total approximately 5 million lines of code on 570 MB of disk space.Working closely with the MSCEUR operations department, designed and developed a custom VB.NET application that performs several “pulls” of classified data from multiple web sites. The data is then linked together in a database readable format that is used for mission critical reports. The application replaced a manual job that typically took 6 hours to perform and reduced it to under a minute.Provides engineering and administrator support for multiple Global Command & Control Systems (GCCS) servers on SUN Solaris, Windows 2003 servers, Microsoft Exchange 5.5 and 2003 servers and Windows XP Professional clients.

Master'S Degree, Management Information Systems

Bachelor'S Degree, Computer Science

Associate'S Degree, Computer Science