Joya Davis Email & Phone Number

Reston, Va, Us

Led Unified Communications for the Cyberspace Marine Corp team, ensuring timely vulnerability remediation and seamless technology migrations. Collaborated with Cisco on product infrastructure, policy updates, virtual machine maintenance, and system security planning.• Managed accreditation packages through the RMF process, achieving Authority To Operate (ATO). Conducted vulnerability scans, system assessments, risk analysis, and provided technical recommendations to ensure compliance with ODPRS on the SIPR side. Developed POA&Ms for vulnerable assets or software and meticulously documented all false findings.• Identified non-compliance with security requirements and proposed mitigations for any deviations. Conducted thorough verification and validation to ensure the system met all security requirements. Collaborated with application engineers to address vulnerabilities and identify false positives within scans, promptly reporting findings to DISA.• Developed and maintained system documents, including System Security Plans (SSPs), architecture diagrams, contingency plans, and continuous monitoring documentation. Proficient in writing and modifying Standard Operating Procedures (SOPs), processes, and other guidance. Created and updated implementation details for each control, aligning with system-specific policies.• Participated in monthly and weekly vulnerability meetings, where I created tracking spreadsheets for team review and updated them weekly. Proficiently communicated technical information to non-technical colleagues and aided other sections on security-related tasks.

Reston, Va, Us

Proficiently managed multiple concurrent projects, activities, and tasks under tight time constraints. Collaborated closely with the Security Operation Center to ensure timely remediation of all vulnerabilities. • Monitoring any Change Tickets that include servers, firewall, and websites making sure they follow security and privacy procedures according to the Smithsonian.• Managed and secured the Azure environments with any new, current software and hardware. Proficient in documenting in cloud applications such as Archer when developing and updating security authorization packages such as Smithsonian Network, Azure, and Microsoft 365. Maintaining system inventory, performing risk assessments, configuration management plans, and standard operating procedures.• Assisting the Smithsonian with insights on how to better secure the network with working closely with the Director of Security and Chief information Officer regarding policies, information security, data protection, and the card payment industry.• Quarterly briefings over 200 information technology specialists with how to efficiently respond to threats, including who to contact during possible intrusions, where to go within the Smithsonian, how to protect their selves and identity. Ability to manage over 160 people and schedule meetings, respond to emails in a timely fashion, report to the director with updates regarding employees and status updates.• Participate in internal and external reviews, inspections, Security Assessments and Authorizations and audits to ensure compliance with federal laws, client’s security policy as well as FISMA and NIST requirements.• Lead remediation efforts when security controls are insufficient, weaknesses are identified in network security configurations, and vulnerabilities deviate from client’s security policy or federal guidelines by recommending corrective actions to mitigate identified deficiencies and developing POAMs.

Hanover, Md, Us

• Identify Cyber vulnerabilities and compliance issues and make recommendations for network access based on the nature of the system, information being processed and mitigations in place auditing routers, firewalls, switches, and firewall and reporting any suspicious activity. Logging into and testing, monitoring IDS/IPS to determine successful detection and level of false positives while analyzing network traffic. Configuring inner/outer router, switches, and firewalls with in the network.• Review ongoing vulnerabilities, comments, and mitigation statements to make sure valid steps are taken to either lower or remove any residual risk.• Assist with developing and maintain executed Government approved security policies, plans, and procedures.• Collaborate well with members of the Information Assurance Module team on daily policy issues. Creation of technically detailed reports based on intrusions and events.

• Preformed risk assessments, update and review system security plans (SSP) using NIST 800-18 (Guide for Developed Security Plans for federal information systems), Plans of Action and Milestones (POA&M), Security Control Assessments, and configurations.• Perform vulnerabilities scan and monitor continuously using NIST 800-137 as a guide with the aid of Nessus Diagnose and resolve software and hardware incidents, including operating systems (Windows) and across a range of software applications.• Knowledge of A&A formerly known as, DIACAP DoD Directive 8500.1 and 8500.2.• Knowledge of NIST SP 800-53/53ARisk Management Framework RMF.• Knowledge of FIPS 199 and FIPS 200.• Updated IT security policies and procedures.

Arlington, Virginia, Us

• Collaborating with a team of 15-20 Specialist and Admins to support a depot of over 3000 Customers on multiple projects at a time as needed.• Running ACAS scans, monitoring environment for abnormalities and submitting report to senior admin for additional hardening and patching as needed.• Performing follow-ups on given tasks as needed, attending meetings and briefings as new information becomes available or assignments ended.• Verifying accounts prior to granting information access, protecting customer information per DOD and other regulations.• Creating accounts in active directory, grouping accordingly and ensuring permissions.• Performing Nessus (ACAS) scans, evaluating results and creating reports for submission to Senior management on next steps.