Howard M. Email and Phone Number

• Investigated and assessed potential security vulnerabilities while tracking remediation progress and creatingactionable reports for cross-functional teams using CVSS, OWASP Top 10 and Vulnerability Exploitability ratingsas guidance.• Lead project to deployed Splunk with custom dashboards as part of our security event incident management(SEIM) solution and reduced time spent manually auditing by 70%. This enabled our junior level personnel tohelp detect, classify, and prioritize security incidents.• Implemented technical security controls using Group Policy, PowerShell/Python scripts and Puppet to meetcompliance with SOX, PCI DSS, RMF, and ICD 503 requirements. The implementation allowed automatedsecurity configuration, detection of unauthorized deviations to network security baseline, and enabledautomated corrections to unauthorized deviations.• Researches security incidents and executes corrective security procedures using data gathered from Splunk,Tennable.sc/Nessus and other security tools.• Implemented security architecture, methods, and controls required to meet security, compliance, and auditrequirements (NIST controls, SOX, ISO 27001, etc)• Reviewed organization processes and procedures to assess practicality and compliance to published securitypolices and industry best practices.• Championed project with cross functional stakeholders to implement access control mechanisms in existingCI\CD pipeline (GitLab/Jenkins).• Developed system security plans that reduced known vulnerabilities by 90% that lead to a superior rating fromexternal government auditors.

• Performs system analysis to evaluate security levels, system utilization and growth projections.• Researches, stage and implement new patches, rollouts and upgrades for various applications and hardware to maximize integrity and efficiency of the system.• Provides level three diagnosis of issues with services and applications in a mix Windows and Linux (Red Hat/CentOS) environment.• Responsible for ensuring infrastructure and services are compliant with internal and external security requirements.• Developed and maintained detailed backup and recovery strategies for multiple systems including databases and file servers for SOX and HIPPA compliance.• Responsible for the deployment and enforcement of corporate and business group information security policies.

Reported security incidents and executes corrective security procedures. Performs system resource management, manages system accounts, performs system-wide backups and data recovery, and load and capacity planning and management.Established work standards, methods, and controls for preventative, scheduled, and unscheduled maintenance actions. Implements security fixes, operating system patches, and antivirus software.

• Setup user access level for each segment of one or more data items, such as insert, retrieve, or delete data. • Provided ad-hoc network, workstation, and Internet support for related customer initiatives. • Monitored System Performance and tuned systems for optimal production for newly implemented services. • Troubleshooting of LAN and WAN infrastructure, Windows servers and desktops diagnosis, resolution and repairs.• Applied operating system updates, patches, and configuration changes. • Partner with members of the business and support teams to improve technical knowledge information sharing.

• Developed and managed effective professional working relationships with contractor personnel, co-workers and clients.• Oversaw and updated assigned support service requests, handling daily technical support activities on desktop support, data network and server management.• Worked independently in troubleshooting and providing solutions to unresolved hardware and software problems through trouble-ticket system.• Performed end user technical support for office and remote personnel to ensure prompt restoration of service on a variety of systems and applications.• Setup desktop computers and peripherals and test network connections.