Devin Edge Email & Phone Number

Dayton, Oh, Us

Wakefield, Ma, Us

Anchorage, Alaska, Us

Responsible for completion of key initiatives as specified on the GTS Security Roadmap.Provide cyber security services, including intrusion detection and prevention, situational awareness of network intrusions, security events, anti-virus and data spillage, vulnerability assessment tools, and incident response actionsEvaluate, report, and make recommendations on the effectiveness of the organization’s cyber security controls. Assess need for any security reconfigurations (minor or significant) within enterprise technologies such as: network(s), Active Directory, Database Platforms, general security processes, etc., and build consensus for remediation adoption and finally facilitating executionLead the Cyber Security Incident Response Program to ensure proper handling of security incidents.Support the Cyber Security department and other internal teams by applying analytical and technical skills to investigate intrusions and identify malicious activity and potential insider threats.Develop and implement recommendations for tuning of IDS, proxy policy, in-line malware tools based on threat feeds, trust and reputation data, events, or vulnerabilities and exploits of downstream systemsIdentify inefficiencies, gaps, and issues relating to the enterprise adoption of and adherence to security policies, procedures, guidelines, standards, and work instructions.Collaborates with business functions, various technology, and business teams to provide cost/benefit for proposed solutions and overall enterprise security posture.System Analysis and Reporting: perform/oversee and report on security platform(s), for example: on security end-point protection, cloud security, Identity Governance, privileged administrative access assignments to IT Admin as well as abnormal end-user activity audits. Define, establish, and gather security metrics for daily, weekly, monthly and quarterly reporting.Other projects or duties as assigned

Provided leadership to identify and define system security requirements, engineer and implement security monitoring strategies, design security architecture, and develop cybersecurity measures. Analyzed and managed technical security solutions including threat assessments and prepares recommendations to address security challenges in identification of risk, mitigation, and compliance. Researched and evaluated current security/cybersecurity best practices and changing regulatory standards to implement reliable controls. Prepared, organized, and maintained Security Assessment & Authorization (A&A) documentation including organizational policy, system security plans (SSP), and Privacy Impact Assessments (PIA). Successfully issued four formal Authorization to Operate (ATO) upon completion of the A&A process evaluation. Managed A&A packages, completes assessments, and facilitated eMass migration to Cloud Solution Providers (CSP) Amazon/Microsoft Azure through efficient use of SaaS platform technology. Monitored practices and developed strategies for full compliance with The Federal Information Security Management Act (FISMA)

Newport News, Virginia, Us

Established processes and implemented practices that ensured the security platform met the organizations need for threat prevention, identification, and remediation on the classified special access program (SAP) / special access required (SAR) training simulators, operations network and associated development network. This requires an intimate knowledge of the Risk Management Framework (RMF) using the Joint SAP Implementation Guide (JSIG), Protecting Special Access Program Information within Information Systems.Reviews all RMF documents provided by ISSMs in order to ensure they are signature ready for the Security Control Assessor (SCA) and Authorizing Official (AO) in order to get respective Authorizations to Operate (ATO).Reviews requests for entry and exit of hardware and software into classified SAP/SAR facilities at air force bases worldwide. This involves researching subject hardware and software to ensure they are authorized for use in a classified SAP/SAR facility and providing documentation to the PSO for final approval and signature Virus scanning, logging and tracking of all software brought into the classified SAP/SAR facilityEstablished the company's Continuous Monitoring Program and implemented protocols.

Planned, coordinated, and executed security testing and risk assessments, implemented effective controls and ensured compliance with regulatory requirements. A key participant in activities that drove business opportunities through effective communication, continuous process improvement, stakeholder engagement, asset management, and enterprise risk management. Supervised and mentored four Jr. Cyber Security Engineers in DoD IT Risk Identification, Categorization, Mitigation, and Formal Reporting Standards.Served as the Technical SME in the completion of project objectives for L-3 Weapons Fuzing and Ordnance Systems. Delivered expert solutions that ensured complete security in system design, configuration, and engineering of components.Generated Plans of Actions and Milestones to accurate tracking of corrective measures, and established practices which identified weaknesses within the ODAA system including reports that efficiently communicated results.Conduct risk assessment testing procedures for verification of Certification & Accreditation (C&A)/A&A/RMF safeguards to meet various regulatory requirements based upon NISPOM, RMF for DoD IT, ICD 503, JSIG & NIST 800-series guidelines.Coordinate with Facility Security Officer (FSO), and Program Manager(PM) to define, implement and maintain information security policies, strategies, and procedures.Excellent leadership led to the successful achievement of Nine ATOs.

Arlington, Virginia, Us

Managed and supported 14 government and defense networks which included supervising and organizing the daily activities of 16 security and network engineers to the on-time achievement of project objectives. Communicated with Senior Leadership providing pertinent information on security measures, telecommunications, and sustainability programs and delivered excellent recommendations for decision-making on project goals and initiatives.Created Security Programs which ensured optimal regulatory compliance for NIST800-53 and NIST800-53A controls and assessments.Conducted security testing, evaluations and risk assessments which facilitated achievement of NIST800-30 A&A packages.Recognized as the top performing Non-Commissioned Officer in the organization.

Arlington, Virginia, Us

Identified operational system vulnerabilities, assessed customer network security events, developed a root-cause analysis of deficiencies and provided remediation recommendations through active use of ACAS/Retina scanning suite software. Collaborated on the annual IS audit that ensured Compliance of Army Cyber Security Regulations and enhanced best practices policies.Provided IT and administrative support to over 2000 DoD Staff members and served as senior third tier escalation contact in the resolution of security concerns.Developed policies for the Information Assurance Department which enhanced accurate document uploads in eMass in the administration of DIACAP packages.

Master Of Business Administration - Mba, Computer/Information Technology Administration And Management

Bachelor'S Degree, Cybersecurity Management And Policy

Associate'S Degree, Computer Studies