Eric Antwi Email & Phone Number

Maryland, United States

• My primary task was to plan, coordinate, and execute SA&A and annual security assessment activities, including scheduling, tracking, and updating the activities in Microsoft (MS) Project, and providing project status updates to management. Develop SA&A related documentation such as the Security Assessment Report (SAR), System Security Plan (SSP), and Risk Assessment (RA).• My secondary tasks were to Develop Plan of Action and Milestones (POA&Ms) for identified vulnerabilities; manage and track POA&Ms and their remediation using the FISMA reporting tool, Cyber Security Assessment and Management (CSAM); and provide federal management with weekly briefs.• Remediate system vulnerabilities IAW STIGS and DoD policies.• Generate Department of Defense (DoD) Information Assurance Certification and Accreditation Process (DIACAP), Risk Management Framework (RMF) packages, and collaborate with staff agencies to obtain required IATT and ATO certifications.• Collaborate with and provide IA technical direction to the existing engineering team and non-engineer personnel.• Collaborate with senior PEO personnel and other engineering and technical support as it relates to research and assessment of emerging technologies, system integration, testing and evaluation, and system architecture design in order to facilitate PEO fielding of material solutions to meet mission requirements.• Consult with senior management and customers concerning IA project matters. • Work with XACTA/eMASS to maintain IA packages.• Assist ISSO/ISSE/SA’s in the RMF/eMASS with initial ATO process as well as ATO reauthorization.• Provide technical ass instance to the System Owner/organization when required.• Assist the SCA when needed• Mitigates system vulnerabilities and recommends compensating controls.

New Jersey, United States

• Perform accurate and precise real-time analysis and correlation of logs and alerts from a multitude of client devices with a focus on the determination of whether said events constitute security incidents• Create and modify security SIEM dashboards to clearly identify scope of findings, or monitor activity• Continuously monitors levels of service as well as interprets and prioritizes threats through use of intrusion detection systems, firewalls and other boundary protection devices, and any security incident management products deployed• Analyze and assess security incidents and escalate to client resources or appropriate internal teams for additional assistance.• Provide response to security events, security alerts and security incidents including network intrusion, malware infection, DOS, DDOS, Brute force attack, privilege account misuse brought at the level of the Network, Application, and endpoint (OS).• Proficiency in utilizing various packet capture (PCAP) applications/engines and in the analysis of PCAP data.• Manage all customer interactions in a professional manner with emphasis on client delight• Utilize internal guidelines in order to properly handle client requests and questions• Work within a 24/7 shift-scheduled security operations environment• Experience reviewing and analyzing log data (firewall, network flows, IDS, system logs)• Observe security solutions; SIEMs, firewall appliances, intrusion prevention systems, data loss prevention systems, analysis tools, log aggregation tools• Technical analysis of network activity, monitors and evaluates network flow• Provide real-time guidance to customers on network configuration, security settings and policies, and attack mitigation procedures• Comprehend basic technology and function of various Operating Systems, the components, and the applications that comprise the particular network and understand the security impact associated with each.

United States

• Conducted security control assessments to assess the adequacy of management, operational and technical security controls implementation using NIST SP 800-53 as a guide• Reviewed and analyzed existing documents such as System Security Plan (SSP), prior Security Assessment Report, Contingency Plan, and the Plan of Actions and Milestones (POA&M) to gain knowledge of the system and previous assessment.• Conducted cloud system assessments, primarily within AWS GovCloud, and Microsoft Azure environments, by utilizing FedRAMP and NIST guidelines• Monitored controls post authorization to ensure continuous compliance with the security requirement• Interviewed security personnel to understand the organizational implementation of the security controls and examine provided artifacts to validate the adequacy and compliance with company policies and procedures of implemented controls• Reviewed scan outputs from Nessus, Qualys, and WebInspect to interpret Vulnerability and Compliance scan results• Supported activities, and conduct Assessment and Authorization (A&A) of new Cloud systems, and Information Security Continuous Monitoring (ISCM), in compliance with NIST SP 800-53 controls within the FEDRAMP Security Assessment Framework(SAF)• Prepared pre-assessment documentation to include Security Control Assessment (SCA) Spreadsheet, Security Assessment Plans (SAP), Assessment kick-off slide deck (In-Briefs) and Out-Briefs• Developed post-assessment documentation to include Security Assessment Reports (SAR) detailing the results of the assessment along with Plan of Action and Milestones (POA&M) request and review vulnerability report to evaluate the risks and assess the effectiveness of implemented processes for addressing and identifying vulnerabilities.

• Identify information protection needs for an IS and Network Environment.• Define IS and Network Environment security requirements in accordance with applicable cybersecurity requirements.• Design security architectures for use within the IS and Network Environment.• Design and develop cybersecurity-enabled products for use within an IS and Network Environment. • Integrate and/or implement security with Cross Domain Solutions (CDS) for use within an IS and Network Environment.• Develop and implement security designs for new or existing network system(s). Ensure that the design of hardware, operating systems, and software applications adequately address cybersecurity requirements for the IS and Network Environment.• Design, develop, and implement network security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation.• Design, develop, and implement specific cybersecurity countermeasures for the IS and Network Environment.• Develop interface specifications for the IS and Network Environment.• Develop approaches to mitigate IS and Network Environment vulnerabilities and recommend changes to network or network system components as needed.• Ensure that network system(s) designs support the incorporation of FBI directed cybersecurity vulnerability solutions.• Utilize security tools and applications including Tenable Nessus and Security Center, IBM Guardium, HP Weblnspect, Network Mapper (NMAP), Jira, Confluence, AWS Console, Splunk• Perform vulnerability/risk assessment analysis to support accreditation and other program protection activities

• Conducted risk assessment on internal enterprise infrastructures and developed reports and recommendations for remediation.• Conducted risk assessment on vendors, contractors and external business affiliates using compliance frameworks such as ISO 27001/27002, SANS20, SOX, HIPAA, PCI DSS, SOC2.• Developed, documented and reviewed incident response plans (IRP), security plans (SP), contingency plans (CP), contingency plan tests (CPT), privacy impact assessments (PIA), and risk assessment (RA)• Maintained current knowledge and awareness of cyber security best practices, industry trends, and regulatory requirements of Energy of Department DoE- (FERC, NERC and CIP).• Reviewed industry guidance for cyber security, identify gaps in cyber security controls and recommend/implement technical or administrative solutions to remediate• Reviewed change management records and designed change packages for cyber security compliance and impacts• Supported development and maintenance of Security and Privacy Control Assessment project management documentation including Master Schedule and Project Plan