Eric Brown Email & Phone Number

Foster City, California, Us

Reston, Virginia, Us

Title: Information Technology Cyber Security Analyst III• Appointed Information Security Officer (ISO) for all of GD-NASSCO.• Security architecture, implementation, administration, GRC (Governance, Risk, and Compliance), to include User Awareness/Training in accordance with multiple sources of compliance and management guidelines.• Interpret numerous alerts, threat analysis, and anomaly detection to determine if security incident has occurred.• Gap Assessment and Audit Management compliance in accordance with NIST/DFAR based corporate policies.• Manages several security appliances that aid in network defense, email/web filtering, and secure log management.• Oversee risk assessments, technical architecture design review and project security reviews ensuring key applications and networks are monitored/verified for risk mitigation. Verify firewall configuration and policies.• Routinely aid in the review of IR reports, current threats, and then develop counter-measures and mitigation controls.• Coordinate security alerts, anomalies and response; provide direction and actionable intel out to other GD BU’s• Independently evaluate the efficiency and effectiveness of information technology and security controls across IT infrastructure, cloud services, networks, and security systems to help manage risks that could impact the company.• Developed curriculum and provided training for IT staff and non-IT personnel, fostering team growth and mentoring.• Proactively engage with the broader Information Security community and address technology shifts and new threats.• Security appliances and tools used and/or implemented in daily analysis responsibilities:o Web Proxy and Email Filtero SIEM and Network Monitoro Network Traffic Analysis (via TAP) Sensor and Command Applianceso (Open Source); Snort IDS and PCAP capture suiteo Host Intrusion (HIPS) and Network Intrusion and Protection (NIPS)o Application Gateway and Load Balancer (Hosted Services)

Title: Information System Security Officer (ISSO)• Provide IT Governance and Support for US Navy projects and infrastructure; requires TS clearance.• Develop Certification and Accreditation (C&A) documentation for new IT systems and capabilities.• Assist software development teams by providing guidance in the area of Secure System Development Life Cycle.• Instrumental in the system analysis and vulnerability assessment to aid in DITSCAP/DIACAP system certification.• Conducts information security risk assessments and effectively communicates risk to program manager and ISSM• Functions as an activity's advisor to the Information Assurance Manager, for all command INFOSEC/Cyber matters in compliance with governing directives and instructions.• Defines security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems.Key Achievements:• Created a full C&A approval for new classified system for Navy; unique system that operates in dual classifications.• Develop a Concept of Operations (CONOPS) on new Navy Space and Warfare Systems (SPAWAR) project.

Randolph Afb, Tx, Us

Title: NCOIC Network and Communications Support, AFRS June 2003 – December 2007• Responsible for all levels of computer and network support for an Air Force Recruiting Squadron (AFRS); area of responsibility: all of Southern California and Arizona recruiting offices.• Network Management, Security Awareness and Education, Security Incident and Response, and Administer AV servers, file storage server, and backup management. Equipment Custodian and Manager. • Manage all local network connectivity, remote office DSL communication, email server, file server(s), help desk responsibilities, desktop / system repair and replacement (R&R), as well as, infrastructure design and upgrade.• This position is a special duty assignment, one deep slot to manage all levels of IT responsibilities.Title: NCOIC Computer and Network Security, September 1998 – June 2003• Supervised the Squadron’s Help Desk of 10 individuals, until promoted to manage IT Security Office.• Commander appointed to managed and supervise newly developed security office after merge of two squadrons.• Developed numerous procedures and guidance on Security disciplines; to include classified media management and destruction, Incident Response, threat detection and mitigation, vulnerability assessment, and more.• Responsible for classified media management, communications security (COMSEC), and Certification and Accreditation support and management for 15+ systems; ranging in classification from UnClass to TS/SCI networks.

Randolph Afb, Tx, Us

- (1987-1998) Aerospace Ground Equip. (AGE) technician.- (1998-2007) Computer System Administrator (SA) and Information Assurance Manager (IAM)

Aa, Computer Information Systems

Aa, Aerospace Science Engineer