Deepak Rastogi Email & Phone Number

Work as Sr. Information System Security Officer in support of Enterprise Security Operation Center (ESOC) of Federal Bureau of Investigation (FBI). This program ensured the enforcement of FBI security management policies, procedures, and guidelines required by NIST, DOJ, FISMA, and OMB.• Support three Enterprise Security Operation Center (ESOC) enclaves for the FBI supporting classified systems ranging from Top Secret (TS) Sensitive Compartmentalized Information (SCI) to Confidential but Unclassified (U) information. However, SCI is under process.• Work towards remediation of a Denial of Authority to Operate (DATO) as one of two accreditation personnel assigned to the Enterprise Engineering Assurance Unit (EEAU) contract. • Review and maintain configuration management activities.• Responsible to assess controls on repository RiskVision on FBINet as required by the agency and NIST.• Rectify and improve operational support by directly enhancing updates to accounts, documentation and repositories in RiskVision where critical records are stored. • Review architecture diagram and topology to assess boundary of systems, Tenable (Nessus) Network Vulnerability scan results.• Review and update various systems Security Assessment documentations such as Contingency Plans, and Contingency Plan Tests, Security Assessment Report (SAR) in compliance with NIST SP-800-18, NIST SP-800-34, SP 800-53r4, and 800-53Ar4.• Develop and maintain POA&M for all accepted risks.

Falls Church, Va, Us

Worked in support of various components (US Trustee and Interpol) of US Department of Justice (DOJ). This program ensured the enforcement of DOJ security management policies, procedures, and guidelines required by NIST, DOJ, FISMA, and OMB.• Based on reviewing FedRAMP external Cloud based system SSPs (Dynamics 365, Azure SSP) and GSS SSP, prepare an ATO package of new system in support of DOJ component in compliance with Risk Management Framework (RMF), NIST 800-37 Rev.1, FIPS 199, NIST 800-53r4 and NIST 800-53Ar4. • Participated in reviewing and updating various system related policies/documents with security team ISSM based on DOJ policies and SOPs.• Responsible to assess the yearly core controls in continuous monitoring phase as required by the agency and NIST.• Maintained and updated assets in CSAM based on Security Posture Dashboard Report (SPDR) and BigFix reports.• Reviewed and maintained configuration management activities.• Performed weekly tenable scan and monthly DbProtect scan and reviewed the scan results.• Review security releases updates and create Change Request security updates for Microsoft, Adobe, Google patches.• Participated in weekly/monthly IT meetings.• Participated Incident Response Plan (IRP) and ISCP exercise.• Performed Security Control Assessment (SCA) of DOJ core controls for various systems under Continuous Monitoring Phase using CSAM.• Reviewed architecture diagram and topology to assess boundary of systems, Tenable (Nessus) Network Vulnerability scan results, DB Protect Database vulnerability scan results, IBM BigFix, Splunk and other security monitoring reports.• Reviewed and updated various systems Security Assessment documentations such as Security Plans, Contingency Plans, Risk Assessment and Contingency Plan Tests Security Assessment Report (SAR) in compliance with NIST SP-800-18, NIST SP-800-34, SP 800-53 Rev.4, and 800-53A Rev.4.• Develop and maintain POA&M for all accepted risks.

Arlington, Va, Us

Worked as an Information Security Analyst supporting the Consolidated Business Information System (CBIS) and Federal Financial System (FFS) contract for the Office of Personnel Management (OPM). This program ensures the enforcement of DOT security management policies, procedures, and guidelines required by NIST, DOT, FISMA, and OMB.

Bethesda, Maryland, Us

Working as an Information Security Analyst supporting the eFAST contract for the Federal Aviation Administration (FAA) of DOT. This program ensures the enforcement of DOT security management policies, procedures, and guidelines required by NIST, DOT, FISMA, and OMB.Role & Responsibilities:• Perform e-Authentication, Security Control Assessment (SCA) using NIST 800-53 Rev4 and NIST 800-53A Rev.1 for the multiple systems on Windows/Unix platforms.• Conduct the security categorization using FIPS 199 to identify confidentiality, integrity and availability.• Develop, update and review Security Assessment and Authorization (SA&A) documentations such as Security Plans, Privacy Threshold Assessment (PTA) & Privacy Impact Assessment (PIA), Contingency Plans, Risk Assessment and Contingency Plan Tests Security Assessment Report (SAR) in compliance with NIST SP-800-137, NIST SP 800-53 Rev.4, and 800-53A Rev.1.• Prepare and review Security Authorization packages for multiple systems in compliance with Risk Management Framework (RMF), NIST 800-37 Rev. 1.• Develop and maintain POA&M for all accepted risks.

Huntsville, Al, Us

Worked as lead MCNOSC Cyber Support, to provide the support vulnerability management, as well as certification and accreditation support with the Compliance and Quality Assurance (CQA) team at Marine Corps Base Quantico, VA.

Applied Integrated Technologies Inc. July 2014 – October 2014Cyber Security AnalystWorking as a Cyber Security Analyst on the IT Resiliency & Security Program for the FEMA of DHS. This program ensures the enforcement of FEMA security management policies, procedures, and guidelines required by NIST, DHS, FISMA, and OMB. Role & Responsibilities:• Conduct the security impact level using FIPS 199 to identify confidentiality, integrity and availability of the multiple systems on different sites of DHS-FEMA.• Performed e-Authentication, Security Control Assessment (SCA) for the multiple systems.• Develop, update and review Security Assessment and Authorization SA&A documentation such as Security Plans (SP), Contingency Plans (CP), Contingency Plan Tests (CPT) and Security Control Assessment Report (SAR) etc.• Prepare and review Security Authorization package including in compliance with Risk Management Framework (RMF), NIST 800-37 Rev. 1.• Develop and maintain POA&M for all accepted risks. • Assist to conduct Network and Application Vulnerability Assessment (NVA & OASA), using NMAP, Nessus and AppDetectivePro

Fairfax, Va, Us

Worked as an Information Security Analyst on the Information Security Oversight Program for the Ginnie Mae of HUD. This program ensures the enforcement of Ginnie Mae security management policies, procedures, and guidelines required by NIST, HUD, FISMA, and OMB.Role & Responsibilities: • Prepared Security Authorization package (C&A) in compliance with Risk Management Framework (RMF), NIST 800-37 Rev. 1.• Developed and maintained POA&M for all accepted risks. • Performed Security Control Assessment (SCA), annual Security Self-Assessment for the various systems using CSAM.• Conducted Network and Application Vulnerability Assessment (NVA & OASA), using NMAP, Nessus, NetSparker, and AppDetectivePro.• Developed findings reports and mitigation strategy based upon scan results • Reviewed architecture diagram and topology to assess boundary of systems.• Developed Security Control Assessment Report (SAR) in compliance with NIST SP 800 series.• Developed and reviewed C&A documents such as Risk Assessment, Systems Security Plan, Contingency plan, Configuration Management Plan, Business Continuity Plan (BCP) and Privacy Impact Assessment in compliance with NIST standards and guidance.• Evaluated information security policies, procedures, and processes. • Reviewed and updated the policies and procedures for the Ginnie Mae Information Systems in compliance with FISMA & NIST SP 800 requirements

Fairfax, Va, Us

Worked as System Analyst on the web-based financial system using Cold Fusion MX 7.0 with SQL Server 2000 Enterprise Edition on Windows 2000 Server service pack 4, in support of Ginnie Mae of HUD.; Developed and maintained System Security Plan (SSP), Contingency Plan and Disaster Recovery Plan for the systems in compliance with FISMA, OMB-130, and NIST SP 800 guidelines. Developed detailed system and data flows, identified the breakpoints in the process and determined system/process enhancements.Collected information, performed analysis, and published detailed business requirements document and requirements traceability matrices (RTM).Assisted in project management services reporting to the client with status reports and work breakdown structure (WBS) reports.Designed the cost effective and efficient solution while working closely with the Users.Created test plans and performed system tests to ensure application meets the specified requirement.Resolved and facilitated fix for day-to-day Database and web based applications production problems and change control requests.Created ad-hoc reports for users and to validate the design using SQL queries (SQL 2000).Responsible for the Version Control system (PVCS).

Mclean, Virginia, Us

Federal Housing Administration (FHA), and Real Estate Assessment Center System (REAC)Role & Responsibilities:Redesigned the Default Management System from FoxPro for windows to a web application system using Cold Fusion 4.5 with MS SQL 2000 database.Designed a cost effective and efficient solution while working closely with the users.Created the database and the Cold Fusion 4.5 web modules for the system.Involved in writing the Stored Procedures in SQL Server 2000 for the system.Responsibilities included maintaining, tuning, backing up and recovering of the databases.Developed detailed system and data flows identifying the breakpoints in the process and determined system/process enhancements, Test plansCreated System Specification Document, Functional Requirement Document, Users Manuals and Data Dictionary documents in compliance with NIST. Developed test plans and performed system tests to ensure application meets the specified requirement.

Worked as System Engineer for The United States Immigration and Naturalization Services (USINS) systems such as Portable Automated Lookout System (PALS) and Port-of-Entry Office Management System (POMS) using FoxPro.Role & Responsibilities:Designed, tested, and implemented the Port-of-Entry Office Management System (POMS) and Portable Automated Lookout System (PALS) using FoxPro.Provided weekly status reports and WBS reports to clients.Organized project meetings and JAD sessions with users and tracked the project status.Created System Specification Document, Functional Requirement Document, Users Manuals and Data Dictionary documents.Developed test plans and performed system tests to ensure application meets the specified requirement.Responsibilities also included travel to INS sites throughout the United States, evaluation and recommendation of software and hardware solutions, direct contact with INS clients.Resolved and facilitated fix for day-to-day Database and web based applications production problems and change control requests.

Diploma, Computer Programming

M.S, Nuclear Physics