Utilizing ACAS for conducting vulnerability analysis on all information systems assigned by reviewing the scan report, understanding the vulnerability, assessing the risk, prioritizing the vulnerabilities, planning remediation steps, and verifying remediation.

Managed up to 22 (cloud and on-perm) Classified and Unclassified Information Systems ensuring security compliance.Provide ISSM support ensuring all ATO requirements are met per the Authorizing Officials (AO) directive.Continuous monitoring of systems, pushing new findings to a timed in progress status.Auditing and mapping controls to evidence, ensuring control implementation and compliance.Review ISSO’s documentation, Implementation statement, Test fields and Security/Privacy… Show more Managed up to 22 (cloud and on-perm) Classified and Unclassified Information Systems ensuring security compliance.Provide ISSM support ensuring all ATO requirements are met per the Authorizing Officials (AO) directive.Continuous monitoring of systems, pushing new findings to a timed in progress status.Auditing and mapping controls to evidence, ensuring control implementation and compliance.Review ISSO’s documentation, Implementation statement, Test fields and Security/Privacy controls ensuring each control/sub-control is adequately addressed with the appropriate mitigating artifacts for systems going up for an (ATO) Authority to Operate.Validation, review, and approval of all documents, i.e. CONOPS, BIA, Entity Creation, EC, Boundary diagrams, Data Flow charts/diagrams, IRP, CP, PIA, PTA, etc.Review and upload Documents in the Governance Risk Compliance (GRC) Tool Risk vision Document Repository.Conduct Kick off meetings with Stakeholder, providing guidance from current state to end state.Provide stakeholder/ISSO guidance through all stages to receive 3-year ATO.Provide Authority to Test (ATT) guidance to Stakeholders, as well as guidance for non-compliant systems receiving a DATO, expiring, and decommissioning systems.Provide 30/60/90 day expiring ATO EC’s, ensuring systems owners are aware of their systems status.The objective of the SCS Team is to perform a thorough physical, technical, and operational security control assessment of all Classified and Unclassified Data Centers determining compliance and risk levels.While at DOJ analyzed test data and security documentation from automated tools and artifacts collected from site assessments.Documented findings based on analysis and NIST 800-53 security controls, and develop Security Assessment Reports (SARs), providing recommendations for improved security control implementation. Show less