• Developed Cybersecurity requirements for satellite/ground software product line using NIST SP 800-53 requirements flowed down from the security control assessors (SCA)• Performed security impact analysis, security and privacy controls testing, vulnerability scanning (SCAP, STIGs, and Nessus), and remediate active findings • Performed ConMon activities using Splunk and ACAS for systems compliance with NIST SP 800-171• Led design and implementation of RSA SecurID for multi-factor authentication to windows workstations• Developed shell scripts to automate Fortify & OpenScap (container scans), reducing time-to-scan / generate reports (30+ software repositories / 60+ containers) from 1-week to 2-days• Generate vulnerability reports (POA&M) and report active findings and milestones to the SCA• Provide overarching security expertise to the software development, DevOps, and program management teams • Developed cyber verification procedures for assessing security and privacy controls (NIST SP 800-53A) for in-house software development (RBAC, error handling, Input validation, logging, TPI, and encryption), increasing the delivery of secure software by 70% and reducing the need for software development rework• Built custom Splunk dashboards and alerts to monitor critical satellite command & control functions, privilege escalation, application startup/shutdown, authentication, and software configurations• Assisted with accreditation and certificate to field efforts across multiple programs.

• Managed multiple Amazon AWS cloud services: (EC2, S3, EBS, ELB, EFS, Cloud Watch, VPC, Security Groups, CloudFront, CloudFormation, CloudWatch, AWS CLI)• Led the Design and Implementation of multiple Splunk components - (Security monitoring tools, dashboard creation, Index storage & optimization, clustering)• Created Standard Operating Procedures for third party hosting provider (account management, patching procedures, monitoring, backup & recovery)• Review IDS events and write reports to identify potential incidents and network intrusions• Monitor DoD and vendor security advisories, and work with the operations team to ensure patches/upgrades are implemented in a timely manner• Presented new system functionalities to customers throughout the SDLC• Design & implement Nessus vulnerability and compliance scanning solution• Worked in SAFE atmosphere participating in daily scrums, PI planning, design review, demos, and backlog grooming • Automate repetitive task through the creation of shell scripts and ansible• Reduced time to create new AWS instance through the creation of application specific AMI’s and Ansible playbooks• Tripwire Configuration – monitor critical file systems setup reports, dashboards, rules, tasks, and baselines• Integrated/Managed CyberArk multi-factor for authentication to various web applications and operating systems

• Manage Windows Domain Controller and configured WSUS, Active Directory, DNS, LDAP• Develop and configure backup procedures through Networker and manage tape library• Standardized operating system baseline by migrating outstanding Solaris x86 servers to RHEL 6• Review ACAS findings and deliver reports to government clients• Facilitate Solarwinds Installation and assist network engineer with configurations• Configure servers for shipment to production and failover sites• Provided regular day-to-day computer support activities which include system administration, storage management, computer images, and VPN related issues• Performed routine system hardening and vulnerability scans for Windows/Linux operating systems• Administer Solaris, Red Hat, SUSE, Windows 2008 & 2012• Setup and configure Clonezilla to deploy laptop images