Eric Olmstead Email & Phone Number

Broomfield, Co, Us

Falls Church, Virginia, Us

Broomfield, Co, Us

- Responsible for all the system owner aspects of the NIST Risk Management Framework (RMF) for ten different systems from initial concept to disposition and decommissioning- Composing and maintaining the authorization and accreditation (A&A) documentation- Assisted with the design and security control assessment for AWS Cloud based system- Conduct audit log reviews via Splunk and creating custom dashboards to streamline Continuous Monitoring (ConMon) activities- Conduct vulnerability and compliance scanning with Nessus to validate security baselines for Windows, RHEL, and VMware ESXi- Write mitigation reports for missing patches and/or deviations from the baseline- Assist with the deployment, tuning, and monitoring of network security tools, (Splunk, McAfee ePO, Varonis)- Assist with security incident investigations and provide data analysis from security tools- Provide system and security status briefings with internal management, external customers and other stakeholder- Mentoring junior team members and created and presented internal training

Reston, Virginia, Us

• Conduct system security scanning utilizing Beyond Trust Retina• Provide IA analysis of system requirement and design documentation for multiple systems to ensure compliance with NIST IA Controls and other Federal Regulations• Draft security analysis reports and brief recommendations to upper management• Conduct risk assessment on Cross Domain Solutions (CDS) via certification test plans and functional rule verification• Voting member of Change Management board; conduct security review and impact analysis for; custom code updates, vendor patching, system & network changes• Assist with FISMA inspections and testing• Research emerging threats and vulnerabilities to evaluate potential security impacts to systems

Herndon, Va, Us

• Conduct system security scanning utilizing Beyond Trust Retina• Provide IA analysis of system requirement and design documentation for multiple systems to ensure compliance with NIST IA Controls and other Federal Regulations• Draft security analysis reports and brief recommendations to upper management• Conduct risk assessment on Cross Domain Solutions (CDS) via certification test plans and functional rule verification• Voting member of Change Management board; conduct security review and impact analysis for; custom code updates, vendor patching, system & network changes• Assist with FISMA inspections and testing• Research emerging threats and vulnerabilities to evaluate potential security impacts to systems

Arlington, Virginia, Us

• Provided IA analysis of systems requirements to ensure system design will comply with NIST IA Controls and researched residual vulnerabilities to provide mitigation guidance• Analyzed monthly McAfee Vulnerability Manager scan results to track remediation and patching efforts for; Solaris, Oracle Linux, Windows Server 2003 & 2008

Falls Church, Va, Us

• Provide IA auditing and analysis of computer systems/appliances/configurations to ensure DoD IA compliance with for a wide variety of operating systems:Linux/Unix: RHEL 5, RHEL 6, Suse Enterprise Linux 10, AIX 7, Solaris 10Windows: XP, 7, Server 2003, Server 2008• Assist in developing secure network architectures, operational concepts, and security accreditation plans & procedures• Support the design, development, evaluation, and accreditation of distributed DoD computer systems. • Support the creation, analysis, decomposition & verification of program related system security requirements • Create DIACAP documentation (ST&E,POA&M,DIP etc) to support various C&A approvals.• Conduct system security scanning utilizing DISA STIGs, SRRs, Windows Gold Disk• Conducted trade study to select a SIEM tool, (LogRhythm). Documented results and briefed the recommended solution to upper management and customer representatives.• Lead security engineer responsible for the system design, documentation and enterprise deployment of LogRhythm. Working closely with the vendor and system administrators for the initial configuration & integration of both appliances and end-point components. • Wrote the operational concept documentation and site installation guide for LogRhythm • Provided initial LogRhythm user training to team members and demonstrated product to the customer• Created content and updated pages for the team’s internal “Wiki” site

Hollywood, Md, Us

• Provided Incident Response in 24x7 Security Operations Center (SOC)• Monitored enterprise networks utilizing SIEM tools, (Cisco Mars & ArcSight), Anti-virus tools (McAfee ePO), and Network tools (IBM Tivoli Netcool)• Deployed Rouge System Detection via McAfee ePO to monitored endpoint systems and identify devices within the enterprise network• Analyzed security events/violations, documented details, coordinated with management and site personnel the appropriate steps to resolve event• Coordinate with other agency components to present daily status updates for Incident Management and briefed incident status at shift change• Responsible for updating the McAfee ePO Standard Operating Procedures (SOP) and training SOC personnel • Helped beta test initial ArcSight deployment; fine tuning the components, monitoring log collection and forensics log analysis to assist management with security investigations• Provided Tier 2 technical assessment for networking and end users issues• Conducted FISMA and ad-hoc security scans utilizing Tenable Nessus

Morrisville, Nc, Us

• Worked on a team to responsible for analyzing IA test findings, developing mitigation measures to reduce risk, documenting results, and briefing certification recommendations to the customer and management • Compose and maintain security documentation utilizing both DITSCAP and DIACAP accreditation processes for system migrating into the US Navy data center• Coordinated IA testing with Program Mangers and Developers to verify systems met DoD requirements and regulations• Utilized eEye Retina and DISA GoldDisk to conduct system security scanning• Assisted Sys-Admins with IA remediation for systems migrating into the data center

Arlington, Virginia, Us

• Lead systems technician, supervised 5 team members responsible for beta testing hardware & software as well as troubleshooting and providing helpdesk support for 100+ end users.• Tracked remediation support utilizing BMC Remedy ticketing system• Researched, planned network design, security measures, system deployment and upgrades for DoD classified network being installed in new building. • System Administrator maintaining 15+ servers, 100+ workstations, printers, file sharing, managed user accounts in Windows Active Directory environment.• Installed and configured Windows 2000, Windows XP, Server 2000, and Server 2003. • Conducted annual and ad-hoc information assurance / security compliance scans with Harris STAT• Conducted system hardening using DISA STIGs, and DISA SRRs • Composed accreditation documentation (DITSCAP) for DoD classified network.• Planned & conducted a disaster/evacuation contingency operations exercise. Documented results and briefed recommended improvements to Senior Management.• Picked by Senior Management for technical expertise to work computer forensic investigations.

Bachelor Of Science, Management Information Systems

Education record

Certificate, Geographic Information Science And Cartography