Hector Sosa Email and Phone Number

Advises the ISSM, AO and other key staff as required concerning emerging Information Assurance, Risk Management, Cybersecurity technology and doctrine issues. Provides technical and compliance reviews of information systems to ensure adequate security posture of platforms architecture and systemsDevelops, implements, and evaluates security programs and implementation of policies designed to anticipate, assess, and minimize system vulnerabilitiesInterprets IT security laws, regulations, policies, standards, and guidelines to ensure appropriate application, implementation, and compatibility on the systemsIntegrates security programs across disciplines; participates in the assessment of new systems design methodologies, institutes measures to ensure awareness and compliance; identifies the need for changes based on new security technologies or threats; reviews proposed systems, networks, and software designs for potential security risks.Participates in implementation of systems security policies, guidelines and procedures related to web-based applications, network, and systems designs. Ensures the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programsRefines guidelines to resolve complex issues and identifies trends in order to develop and propose new policies and practicesProvides instruction to employees and supervisors on systems security engineering issues related to the RMF-ATO accreditation processImplements Risk Management Framework (RMF) and develops necessary artifacts, System Security Plan (SSP), Plan of Action & Milestone (POA&M) and Cyber scorecard) on key components of platform and associated test networks.Establishes and maintains liaison with internal and external groups working on legal, internal audit, physical security, and other information security matters

Bulwark Securities leverages the experience and knowledge of leaders in the industry to offervCiSO services, Advisory practices, Business process audits, Vulnerability assessments and management, custom application development, database development, procurement of managed and other services.

Function as a network security design and architecture subject matter expert in support of the Task OrderConduct network security architecture reviews to determine the size, and placement of intrusion monitoring equipmentConduct interviews with customers to clarify, refine and propose optimal sensor placementConduct periodic architectural reviews of installed sensors to assess effectiveness and propose optimal installation alternatives as requiredConduct periodic reviews of sensor metric reports to evaluate and prioritize sensors for review and assessment Engage with customers and the DISA team of stakeholders to continually assess and verify sensor service issuesImplementing/configuring CISCO products (IDS/IPS, Firewalls, Routers & Switches)Maintaining, designing and securing internal and public/private cloud-based environmentsExplaining technical topics to folks with varying levels of technical aptitudePutting into practice understanding of network security best practices and methodologies