Jonathan Carrasco Email & Phone Number

Colorado Springs, Colorado, Us

• Established mission system packages for Assessment and Accreditation (A&A) of Military Satellite Communications (MILSATCOM) mission systems in accordance with (IAW) the Department of Defense (DoD) Cybersecurity A&A Program for MILSATCOM's operational baseline components and terminals• Complete annual Federal Information Security Management Act (FISMA) validation of Cybersecurity control compliance IAW the Department of Defense Instruction (DoDI) 8500.01, DoDI 8510.01, Committee on National Security Systems Instruction (CNSSI) 1253, and the Cybersecurity Strategy, and maintain system Plan of Action &Milestones (POA&M)• Initiated, assessed, and maintained RMF documentation artifacts for MILSATCOM systems for compliance• Assisted in the development and review of MILSATCOM level policies for the system development lifecycle of MILSATCOM systems to meet Risk Management Framework (RMF) requirements• Registered, maintained, and uploaded operational systems security baseline documentation and artifacts in eMASS• Incorporated best practices to manage risk and coordinated program team meetings to ensure cybersecurity governance is embedded from start to finish in the Software Development Life Cycle (SDLC)• Coordinated, conducted, and documented self-assessments and security audits for A&A packages• Analyzed ACAS scans to prioritize findings with cyber intelligence for vulnerability management

Chantilly, Virginia, Us

• Performed security functions for multiple Department of Defense (DoD) programs to ensure the confidentiality, integrity, and availability of multiple classified computer systems • Implemented the information systems security program for assigned programs/systems in compliance with NISPOM/DAAPM, and ICD 503 requirements• Applied cyber security standards including DISA STIGs, RMF security controls (NIST SP 800-53, NIST SP 800-171, CNSSI 1253), and Polaris Alpha Systems policies and procedures to computing systems• Prepared and maintained security Assessment and Authorization (A&A) documentation (e.g., IA SOP, SSP, RAR) including participation in system categorization• Performed Continuous Monitoring of security controls, to include audit log review, security patching, compliance scanning, configuration management, account management, vulnerability management, control status reporting• Participated in security incident response as necessary, including spill remediation, intrusion and malicious code detection and investigation, reporting, and mitigations to prevent re-occurrence• Supported awareness and training objectives by leading group and individual training sessions, reviewing policies and materials, and suggesting program improvements• Performed System Administration implementing NIST RMF, NISPOM DAAPM, and ICD 503, and/or DAAPM Information System requirements• Administered system functions to include security policies and account management of Microsoft Windows as well as Linux based systems

Education record

Core Technical Bootcamp

Information Technology

Automotive Service And Repair

Electrical Engineering Technologies/Technicians

Electrical Engineering Technologies/Technicians

Education record