Earl Mitchell Email & Phone Number

Internet Security Analyst, ZSCALER Cloud Administrator (ZCCA-IA)PNC Bank Cyber Security Operations, Pittsburgh, PA (08/15/2020-10/22/2021) Initiated or processed enterprise network access request, by exception, to Internet Websites for PNC partners and staff via a Security Web Gateway. Mediated final approval of access to individuals and provisioning lifting Data Loss, Data Protection, SOC (Security Operations Center), Privacy Division accesses blocks and added coinciding Website address entries to ZSCALER URL categories or allowed list/block list on the ZSCALER Administration Portal. Diagnosed and identified causes of any failed access after provision of access privileges. Cyber Intrusion Analyst, Data Loss Prevention. PNC Bank Cyber Security Operations Center (SOC), Pittsburgh, PA (4/2015-08/15/2020)Collaboration with Cyber Threat, Cyber Response, and Forensics, Cyber Data Loss Prevention Analysts, Network and Security Architecture Engineers to anticipate and neutralize hostile actors and malicious software introduced to the enterprise network (Intended/unintentional); other responsibilities require proactive monitoring of the network, monitoring applications, and technical environment changes indicative of hostile activity directed towards the PNC Metropolitan Area Networks enterprise and for several other PNC U.S. geographical locations. Directly alerting and conferencing-in upper management, top-level Network and Network Security Architects as well as critical commercial security vendors during serious incidents or outages that impact the bank.

Beacon Hill Technologies, Pittsburgh, PA.Information Assurance Analyst (11/2014-03/2015)Mosaic Software, Pittsburgh, PA Coordinated a NIST SP 800-37/NIST SP 800-53 (Rev4) Security Control Assessment and Security Authorization at Mosaic Software for the Software for Substance Abuse and Mental Health Administration (SAMSA), Bethesda, Maryland. confirmed accuracy of IT System and information security categorizations; developed Security Assessment Plans; System Security plans; Risk and E-authentication assessments; Technical Vulnerability Analysis (e.g., Nessus FISMA Compliance and Vulnerability Scans); Contingency and Disaster Recovery Plans; Privacy Threshold Assessments; Privacy Impact Assessments; documented findings in the system program of achievements and milestones (POA&M). Also provided quality assurance for all delivered reports.

Reston, Va, Us

Security Testing and Evaluation Engineer (08/2013-04/2014)Blue Canopy Group, LLC Reston, Virginia Completed FISMA (Federal Information Security Management Act of 2002) based IT Security Assessments at the Center of Medicare and Medicaid (CMS), Baltimore, MD. Assisted in preparing preliminary project schedules; preliminary and final security assessment plans; security assessment out-briefs (daily); project kickoff meetings and presentations, assessment schedules; final security assessments reports; and archiving assessment results in FEDTRAQ FISMA tracking system. Assisted in defining a network authorization boundary for the Sergeant at Arms, US House of Representatives. Assisted in completing a gap analysis between in-place and updated security protection profiles (Physical, Logical, and Operational security) for US House of Representative’s Campus Area Network.

Information Assurance Consultant (10/2010-07/2013)Digital Management Incorporated Bethesda, Maryland Assessed IT System management, operational and technical security controls at the US Department of Transportation. Reviewed External Service Provider’s SOC 1 and SOC 2, and SSAE 16 reports to ensure general compliance of external host facilities with National Institute of Standards and Technology requirements. Assisted the Federal Motor Carrier Safety Administration’s (FMCSA) Privacy Officer by providing initial security awareness training, coordinating periodic privacy orientation meetings, reviews, and revisions, of Privacy Impact Analysis (PIA) statements and Federal System of Records Notice (SORN) for FMCSA IT systems. Provided continuous monitoring and FISMA reporting using Cyber Security Assessment and Management (CSAM).