Imran Shah Email & Phone Number

Mclean, Va, Us

Mclean, Virginia, Us

I have been instrumental in shaping the cybersecurity landscape for critical DHS and DoD initiatives. My responsibilities span across leading edge cybersecurity practices and compliance measures, ensuring the secure and efficient operation of national security systems:• Strategic Leadership and Compliance: Spearheaded the cybersecurity strategy for customers aligning with DoD and NIST standards. My efforts have been pivotal in coordinating security compliance and remediation efforts, establishing a robust cybersecurity framework that enhances national security.• Project Management and Implementation: Managed and executed cybersecurity projects, ensuring on-time delivery and adherence to the highest standards of security. Played a critical role in enforcing Security Technical Implementation Guides (STIGs) and facilitating the transition to CAC Authentication, significantly strengthening system security postures.• DevSecOps and Security Engineering: Supported the development and maintenance of a DoD-compliant DevSecOps pipeline, integrating security into the development lifecycle and ensuring the deployment of secure and reliable software solutions.• Risk Management and Threat Mitigation: Conducted comprehensive threat modeling and risk assessments, identifying vulnerabilities and implementing effective mitigation strategies. My analytical approach to cybersecurity has ensured continuous compliance with DoD and DHS requirements, safeguarding sensitive information against potential threats.• Stakeholder Engagement and Team Leadership: Effectively communicated with stakeholders across multiple federal agencies, providing insights and recommendations that have shaped cybersecurity policies and practices. Led cross-functional teams in the implementation of security measures, fostering a culture of security awareness and resilience.

Performed the duties of Security Manager, overseeing and ensuring the security posture of systems critical to the Defense Health Agency's mission. My responsibilities were diverse and impactful, reflecting a dedication to enhancing national security through rigorous cybersecurity measures. Highlights of my role include:• Cybersecurity Leadership and Oversight: Led a team of Information Assurance Analysts and Information System Security Engineers, directing efforts to achieve and maintain compliance with DIACAP and FISMA standards. My leadership ensured that the DHA DHSS PEO met stringent security and compliance requirements.• Strategic Risk Management: Orchestrated comprehensive risk assessments and cybersecurity operations, identifying vulnerabilities and implementing strategic mitigations. My proactive approach to threat modeling and vulnerability identification played a crucial role in safeguarding sensitive data and maintaining operational integrity.• Regulatory Compliance and Accreditation: Successfully led all DIACAP IA actions, including obtaining ATO, conducting annual reviews, and overseeing contingency plan testing. My efforts ensured continuous compliance with evolving cybersecurity regulations and standards.• Innovative Security Solutions and Best Practices: Pioneered the integration of advanced cybersecurity tools and practices, including Fortify source code review, AppDetective scanning, WebInspect scanning, and application penetration testing. These initiatives significantly enhanced our cybersecurity posture and set new standards for security within the organization.• Stakeholder Collaboration and Communication: Fostered strong relationships with internal and external stakeholders, effectively communicating complex cybersecurity concepts and strategies. My ability to bridge technical and non-technical domains has been instrumental in advancing the organization's cybersecurity objectives.

Reston, Va, Us

As Security Operations Manager I was dedicated to advancing cybersecurity frameworks within the Military Health System (MHS). My tenure at SAIC was characterized by strategic innovation, leadership, and a commitment to excellence in securing sensitive health information systems. Key achievements and responsibilities included:• Cybersecurity Strategy and Execution: Spearheaded the cybersecurity strategy for the DHSS Applications Support contract, establishing a robust security framework that aligned with the Department of Defense's stringent standards. My leadership in this arena ensured the protection of critical health data and systems from emerging cyber threats.• Team Leadership and Development: Managed a dedicated team of IA Analysts and Security Engineers, guiding them through complex security challenges and fostering a culture of continuous improvement and learning. My focus on team development contributed significantly to our success in meeting and exceeding cybersecurity goals.• Compliance and Risk Management: Oversaw comprehensive compliance initiatives, ensuring adherence to the DIACAP and other regulatory requirements. Conducted risk assessments and implemented strategic mitigations to address identified vulnerabilities, significantly enhancing system security and resilience.• Innovative Security Solutions Implementation: Led the adoption of cutting-edge security technologies and practices, including PKI initiatives and configuration recommendations for data, host, and network security. My efforts in integrating advanced security measures played a crucial role in fortifying our cybersecurity defenses.• Stakeholder Engagement and Collaboration: Worked closely with military service branches and other federal agencies, establishing collaborative relationships that facilitated the exchange of best practices and strengthened our collective cybersecurity posture.

Core Credential Of Readiness

Master Of Science (M.S.), Information Security And Assurance

Master Of Science (M.S.), Operations Research

Bachelor Of Science (B.S.), Computer Science