Edwin Asante Email & Phone Number

Glattbrugg, Zürich, Ch

Glattbrugg, Zürich, Ch

• Analyze events that are triggered due to security threats or incidents• Develop and prepare reports in regard to security events• Review security alerts from internal and external sources then determine the organizational impact• Analyze suspicious emails, phishing attempts, and make determinations on required actions (i.e. mail gateway black listing or other security actions)• Provide response to internal staff concerning security related topics• Manage security related tickets within the ticketing system to meet time sensitive requirements• Prepare the initial steps to enact computer emergency response team (CERT) for critical or severe cases• Monitor Network traffic to identify unusual behavior or specific security related events • Monitor the Security Information and Event Management (SIEM) for security incidents and other security related concerns• Monitor System and User behavior to quickly identify security driven events with the least amount of time lapse• Monitors data integrity• Ensure the work flow for the organizations incident response process is followed and correctly documented

Atlanta, Georgia, Us

• Updated IT security policies, procedures, standards, and guidelines according to private and federal requirements.• Prepared and submit Security Assessment Plan (SAP) to ISSO for approval. • Developed and updated system security plan (SSP) and plan of action and milestone (POA&M).• Created reports detailing identified vulnerabilities and the steps to remediate. • Conducted Security Test and Evaluation (ST&E) on both systems and facilities.• Developed Security Assessment Report (SAR) for both systems and facilities. • Participated in change management and Plan of Action and Milestone (POA&M) meetings.• Assisted with the performance of Vulnerability Assessment making sure risks are assessed, evaluated and proper actions are taken to limit the impact on the Information and Information Systems.• Performing vulnerability checks on desktop computers.• Gathering evidence for Authorize to Operate (ATO) process.• Used NIST SP 800-60 & FIPS 199, determine the system categorization for organizations by evaluating information types and then relate them to the security objectives (Confidentiality, Integrity, & Availability).• Conducted Kick Off meetings in order to categorize systems according to NIST requirements of Low, Moderate or High system.• Developed a security control baseline and plan that was used to assess and implement security control. • Conducted security control assessments to assess the adequacy of management, operational privacy, and technical security controls implemented. Security Assessment Reports (SAR) were developed detailing the results of the assessment along with Plan of Action and Milestones (POA&M).• Developed System Security Plans to provide an overview of Federal Information System Security requirements and described the controls in place or to meet those requirements.