Jonathan Carrasco Email & Phone Number

Colorado Springs, Colorado, US

• Established mission system packages for Assessment and Accreditation (A&A) of Military Satellite Communications (MILSATCOM) mission systems in accordance with (IAW) the Department of Defense (DoD) Cybersecurity A&A.
• Complete annual Federal Information Security Management Act (FISMA) validation of Cybersecurity control compliance IAW the Department of Defense Instruction (DoDI) 8500.01, DoDI 8510.01, Committee on National Security.
• Initiated, assessed, and maintained RMF documentation artifacts for MILSATCOM systems for compliance
• Assisted in the development and review of MILSATCOM level policies for the system development lifecycle of MILSATCOM systems to meet Risk Management Framework (RMF) requirements
• Registered, maintained, and uploaded operational systems security baseline documentation and artifacts in eMASS
• Incorporated best practices to manage risk and coordinated program team meetings to ensure cybersecurity governance is embedded from start to finish in the Software Development Life Cycle (SDLC)

Chantilly, Virginia, US

• Performed security functions for multiple Department of Defense (DoD) programs to ensure the confidentiality, integrity, and availability of multiple classified computer systems
• Implemented the information systems security program for assigned programs/systems in compliance with NISPOM/DAAPM, and ICD 503 requirements
• Applied cyber security standards including DISA STIGs, RMF security controls (NIST SP 800-53, NIST SP 800-171, CNSSI 1253), and Polaris Alpha Systems policies and procedures to computing systems
• Prepared and maintained security Assessment and Authorization (A&A) documentation (e.g., IA SOP, SSP, RAR) including participation in system categorization
• Performed Continuous Monitoring of security controls, to include audit log review, security patching, compliance scanning, configuration management, account management, vulnerability management, control status reporting
• Participated in security incident response as necessary, including spill remediation, intrusion and malicious code detection and investigation, reporting, and mitigations to prevent re-occurrence

Education record

Core Technical Bootcamp

Information Technology

Automotive Service And Repair

Electrical Engineering Technologies/Technicians

Electrical Engineering Technologies/Technicians

Education record