Glenn Mcintyre Email & Phone Number

Martinsburg, Wv, Us

Perform assigned ISSO duties for multiple DOI/BIA information systems including all SA&A preparatory documents such as FIPS-199, System and Technical descriptions, Security Test and Evaluation Plans (STEPs), Security Assessment Reports (SARs), System Security Plans (SSPs). Maintain systems’ CSAM Repository files, for those systems under my responsibility, Conduct Assessments and all follow-up Plan of Actions and Milestones (POA&Ms) management activities from origination through closure. Plan and conduct all phases of system assessments supporting the Continuous Monitoring Program. Devise dashboards and dashboard components reflecting various project facets and features for the convenience of Tikras and BIA management. Conduct trend analyses by system and across all systems to determine system or agency common issues and NIST SP800-53 control family and control problem areas. Devise new system/CSAM metrics based on US Government customer needs. Provide analytic input and resolutions to unanticipated problems. Manage/Task Lead of Tikras team and assign system/tasks based on customer needs. Reassign systems when/if needed based on analyst experience and capabilities. Design and prepare periodic status and other progress reports in accordance with customer needs and contractual requirements. Expand the scope of the contract/project/tasks when required, increasing corporate revenues.Current Resume (20220101) is attached here.

Instruct collegiate students of all ages in the following areas: PC Troubleshooting and Repair; Microsoft Office Suite2003; CompTia Security+, and IT Project Management. Also serve as faculty member of IT Curriculum AdvisoryCommittee. Currently developing course materials for IT-Information Security Governance.

Satellite Beach, Florida, Us

Dec of 2019, family medical issues prohibited my capability to travel 50-75%. As an IRS Safeguard reviewer, and unable to travel to review sites, I was laid off by my then-company - TechnaLink, Inc., a subcontractor to Booz-Allen-Hamilton. These same issues, initially, impacted my job prospects - however there has been an improvement in my availability. I can't travel, extensively, but am back to the point of commutability within an hour one-way-commute. As things improve, this caveat will lessen accordingly.

Function in all areas of the IRS Safeguards Program – Conducting Safeguard Reviews checking federal, state, and local agencies which obtain, store, process, transmit, and destroy Federal Tax Information. Complete and submit technical writeups on any of 25 technologies and submit both the working spreadsheets and the final Safeguard Review Report (SRR). Receive and conduct analysis of Safeguard Security Reports (SSR) – submitted by agencies annually, as well as analyzing and processing the Corrective Action Plans (CAP) submitted by agencies semi-annually correcting findings discovered and documented during the Safeguard review process. Effectively, this is an assessment of the agency’s systems, though concentrating on the Confidentiality dimension of the CIA security triad. Additionally, I modified the worksheets we use for assessing systems to include programmatic means to convert raw test-case responses/passes/failures, as identified in the Safeguard Computer Security Evaluation Matrix (SCSEM) to an intermediary state prior to import into the SRR for submission to the State or Agency Lead on the review. I further automated the process by programmatically importing data from the SCSEM worksheet and populating a master-SRR-Matrix for IRS delivery and use.

Training and conduct of Security Assessment and Authorization (SA&A/C&A) for IRS GSS, Tier 1/2/3 systems. Process documentation and re-engineering of comprehensive FISMA Security Assessment processes to accommodate the wide variety and type of systems found in the Internal Revenue Service.

Technical Lead/Manager for team of security analysts researching and writing Security Configuration Standards/Security Baselines for IBM Mainframe hosted COTS packages. The team/project conducts the following activities for the IRS.• Creation of Security Standards/Security Baseline for COTS products used by the IRS.• Analyze and support for operational requirements;• Development of system software and configuration standards;• Support for implementation of recommendations, and document maintenance;• Identify and document all security vulnerabilities for infrastructure supporting CADE2;• Document and align the remediation with industry and government source requirements and guidance; • Gather information from industry and government sources to support standards development;• Support operation activities including verifying Server Checklists;• Support EOps approval processes related to compliance issues; and• Customer interaction to devise appropriate metrics and deliverables.

Conduct and document FISMA system and FedRAMP System and Cloud 3PAO assessments using both NIST SP800-53 Revs 3 and 4. Begin reengineering scoping of test cases for FedRAMP control breakdowns for Low, Moderate, and High impact systems and clouds. Contract ended prematurely due to anticipated assessments/contracts being delayed and/or canceled.

Vienna, Virginia, Us

Responsible for all aspects of Security Compliance, Governance, Scanning, Vulnerability Management, Security Patching, Policy and Procedure origination for AWS Cloud environment in use by Department of Energy/Energy Information Administration.

Houston, Texas, Us

IA Policy and Procedure origination, review, update. Security Services On-Call coverage. Enterprise Security Patch Management. Security Services Subject Matter Expert for security and governance document references. Security Business Process analysis and reengineering. Migrate processes to repeatable procedures, compliant to ITIL requirements. User Recertification. Designed and implemented Role Based Access Control for Treasury Web Application Infrastructure. Conduct User and Privileged user recertification. Audit response and compliance. SA&A processing for TWAI as well as hosted applications. Evaluate and recommend implementation of various IA-related support tools. Mentor entry-level Information Security Staff. Project and Task Leadership roles as required.

Current duties include - Perform all phases of Certification and Accreditations processing for U.S. Coast GuardOperations Support Center (OSC) within the Department of Homeland Security. Evaluate draft and new NISTpublications for their impact on ISSO requirements and C&A processing. Assigned as both Assistant ISSO andCertification Agent for multiple systems based at OSC, both Major Application and General Support Systems.Facilitate all phases and produce all relevant C&A artifacts consistent with new system C&A as well asrecertification of systems. Full familiarity with all relevant documents, publications, and instructions relevant to C&Aand security control assessment. Fully capable in the efficient use of Risk Management System (RMS) for C&Apackage preparation, and Trusted Agent (TA) artifact repository. Provide Information Assurance expertise andassistance to system personnel as needed. Fully cognizant of the purpose and contents of:

Wrote and implemented software test plans Performed software quality assurance, testing, and documentation Worked on multiple projects simultaneously, including software QA, firewall testing, and validation efforts Integrated third-party software into multiple AOL release versions; ­ Security Analyst January 2004 ­ September 2004 Responded to network intrusions, incidents, and events Conducted IDS sensor signature definition and identification of new unidentified virus mutations Evaluated and used Network Intrusion Detection Systems (NIDS), Host Intrusion Detection Systems (HIDS) and Network Intrusion Prevention Systems (NIPS) ­ such as Sourcefire/Snort software, Symantec appliances and Manhunt software, Enterasys Dragon, ISS BlackIce, and ISS Site Protector Utilized a variety of Security Information Management (SIM) Software to monitor network events, collected event information for analysis. Software included RealSecure and NetForensics software suites. Reviewed, assessed, and modified VA-Security Operations Center (VA-SOC) documents: - Technical Documentation on ECSIP Nationwide Gateways - Incident Response Plan - System policies, procedures and controls - Risk Assessments - Security Plans

Engaged in the design, development, integration deployment of the "Automated Dimension Rating Systems (DRS-2)" software suite - Designed to automate information collection, analysis, and reporting of the DRS-2 Diagnostic and Treatment Model

De facto lead of the design/programming effort Designed, engineered, developed, tested, integrated, and deployed the TTSS-SelfTest suite, an automated DMV testing suite Devised and supervised the integration and deployment models used to deploy the software suite throughout Maryland and Louisiana

Managed UTA effort to build business in the Gulf States area