Dawn E. Email and Phone Number

Manage a proactive security program geared toward Booz Allen’s assets infrastructure, and networks. • Oversight of teams to assess the attack surface through asset discovery, inventory classification, risk prioritization, continuous vulnerability scanning, penetration testing, and operational security control testing• Develop and curate the Emerging Cyber Threat Program to assess impact to corporate interests• Communicate cyber threats to senior and executive leadership along with countermeasures to address issues• Utilize combination of business background and technical experience to identify impacts to the firm and develop plans to mitigate them• Establish operational goals in alignment with corporate strategy

- Conduct hands-on network and web application vulnerability assessments using a mix of manual testing and a variety of tools, including Nmap, Burp Suite, Nessus, Wireshark, and Kali Linux.- Manage project throughout the lifecycle of a security assessment.- Author and debrief penetration testing reports to clients.- Maintain team ESX host, Kali Linux server, Windows Server.- GIAC Certified Web Application Pen Tester (GWAPT) through SANS.- GIAC Certified Pen Tester (GPEN) through SANS.- WAPT (elearnsecurity) in progress.

Linux: - Expertise with Red Hat (RHCSA / RHCE certified), CentOS, Ubuntu, and SuSE Linux Enterprise. - Integration of sssd / kerberos authentication of Linux against Windows AD. Operations: - Lead engineer for LAMP web hosting environment (dev, stage, production). - Provide technical and consulting support - Previously, was lead for infrastructure team on Open Enterprise Award-winning social networking platform for Booz Allen employees. Cloud: - Experience with AWS and AWS GovCloud. - Hybrid cloud integration of Vormetric appliance on-premise with cloud environment. - Course: AWS Technical Essentials - Course: Architecting on AWS - Course: Advanced Operations on AWSSecurity: - Linux server hardening against CIS Benchmarks - Vulnerability remediation - GIAC Certified UNIX Security Administrator (GCUX) through SANS. - GIAC Certified Web Application Pen Tester (GWAPT) through SANS. - Cloud Security Fundamentals through SANS.Application Expertise: - Demonstrated ability to troubleshoot complex operating system and application issues. - Extensive open source application support including Apache, MySQL, HAProxy load balancers, SSL certificate integration using openssl, etc... - Deployment, configuration, and management of f5 BIG-IP load balancers.Configuration Management: - Subversion, Mercurial, Git, and Atlassian JIRA bug tracker.

- Application systems administration for enterprise-level learning management systems at Virginia Tech - Blackboard (technical lead), Sakai- Plan and allocate hardware, storage, and database resources for multiple environments (dev, test, preproduction, production).- Knowledge of Tomcat, Apache, SSL configuration and server certificate maintenance.- Install and integrate smaller applications on VMWare Server, including Windows Server 2003 based applications.- Knowledgeable with Oracle, SQL Server, MySQL.- Perl and shell scripting- Project management skills

- Designed, wrote and implemented software test plans, test design specifications, and test cases. - Provided extensive testing and wrote test scripts for the Sakai and OSP open source communities.- Used Atlassian JIRA bug tracker to report and track software defects.- Worked with faculty to troubleshoot issues they encountered with our learning management systems.

Responsible for setup, development and maintenance of websites for corporate and small businesses.

- Configuration of Arbor Billing System database to provision new product offerings, and product management/pricing of existing products.- Produced reports to detail products added to Federal Government accounts and erroneously billed telephone lines.- Documentation of billing operations for the first tier billing support group.

- Interviewed potential bill finishers and provided recommendations on best fit- Integration of lockbox capability- Coordinated requirements between bank and bill finisher to ensure that invoices used the correct OCR font and format.- Third tier support for billing issues, used SQL to query the database- Worked with first and second tier support in Netherlands, Belgium, and Argentina.