Jonathan Berns Email & Phone Number

Working on an personal Open Source project. - Flask template that is meets the majority of the STIG requirements right out of the box.

Charleston, South Carolina, United States

Charleston, South Carolina Area

Charleston, South Carolina Area

Charleston, South Carolina Area

Key member for the DISA audit receiving highest CNDSP recognition and received an individual accolade for developing an application for reporting ACAS Security Center vulnerabilities to subscribers.Provided metrics to senior management on the current security posture of the Department of Health Agency. Reviewed and provided recommendations for POA&Ms for unmitigated IAVMs. Developed custom audit files in Tenable Center to determine proper system configuration.Performed Tenable Security Center administration and troubleshooting tasks.Provided vulnerability scans and analysis to Defense Health Agency sites across the world.Liaison between the Vulnerability Analyst team and Development team integrating the Vulnerability Analyst processes into a custom web application. Coordinated with the Network Monitoring System Team with information from vulnerability scan results.Coordinated with system administrators on vulnerabilities and provide corrective actions to maintain compliance with federal regulations.

Charleston, South Carolina Area

Developed web application in python using pyramid framework and Bootstrap for vulnerability analysis and custom security information and event management system from multiple security appliances such as Splunk, HBSS, and Tenable through APIs and HTTP interfaces..Developed python web application to extract data from Tenable SecurityCenter using SecurityCenter RESTful api.Developed VB.Net application to retrieve data from Tenable SecurityCenter api to generate custom reports and provide the ability to analyse vulnerability data.Developed automation tools in VB.net and improved current processes to saving over thousands of work-hours.

Liaison between multiple companies dealing with cyber security issues at Department of Energy (DOE) Savannah River Site (SRS) that assesses vulnerabilities on the network using Nessus as well as determining the security risks of those vulnerabilities using common vulnerability scoring system. Key member in the development of the Business Continuity Plan and Disaster Recovery Plan for the DOE Certification and Accreditation (C&A) of Accreditation Boundary (AB).Consulted on cyber security issues with senior management and assisted in drafting and editing of information security policies, standards, and processes. Enforce IT processes to ensure consistent, well-integrated application structures in full compliance with NIST and FISMA standards; participate in system Certification and Accreditation as well as Federal Information Security Management Act processes.Making sure that IT General Controls and IT Application Controls are evaluated, monitored, logged, and auditable. Ensure internal Sarbanes Oxley and PCI IT controls are operating effectively and all documentations are available for Internal and External Auditors. Performed system validation for vulnerabilities and baseline for process control systems.Produced cyber security training materials for company employees.Consulted on cyber security issues with senior management and assisted in drafting and editing of information security policies, standards, and processes.Team Lead of the Vulnerability & Patch Management Team along with training individuals on using Nessus Scanning Software.Conduct research on security issues and new vulnerabilities to determine the risks to the organization’s network.Member of Cyber Emergency Response Team (CERT) where I am deployed into the field to collect forensic data investigated possible incidents, and report findings.

Bachelor Of Science (Bs), Network Security, 3.6

Bachelor Of Arts (Ba), Psychology

Associate Of Science (A.S.), Electrical And Electronics Engineering

Activities and Societies: Cum Laude