Jeremy Phagan Email & Phone Number

Dandridge, Tn, Us

Dandridge, Tn, Us

Washington, United States

Senior Security & Compliance analyst supporting FedRAMP ATO for SAP Concur Travel & Expense. Direct security & compliance involvement in achieving FedRAMP Agency ATO. Direct responsibility for monthly Continuous monitoring oversight and agency delivery, to include vulnerability metrics, SLA management, POA&M & Deviation Request management, Secure Inventory metrics, and GRC platform data inclusion. NIST 800-53 analysis, development, and approval, with a focus on AC, CM, IA, and SI control families. Direct responsibility for SSP (System Security Plan) front matter and security control development per FedRAMP requirements and NIST 800-53 rev 4 and rev 5 control requirements. Experienced ensuring compliance in both AWS GovCloud & AWS E/W environments related services, with a heavy focus on both achieving and maintaining a fully FIPS-validated environment for both Data at Rest and Data in Transit.Responsibility for assisting in development of security policies, procedures, and standards as they pertain to overall FedRAMP & FISMA compliance & security initiatives. Closely work with various engineering teams to achieve compliance for FISMA / FedRAMP Moderate Baseline control sets, ensuring the confidentiality, availability, and integrity of government data processed and stored in the overall system. Direct participation in FedRAMP, SOC 2 Type 2, and PCI DSS audits annually, and responsibility for obtaining and delivering control evidence for these efforts.Vulnerability management for both hypervisor and containerized environments. Tenable.sc (ACAS) & Sysdig (k8s) vulnerability scans analysis and evidence collection for OOSLA vulnerability information, disposition, and triage. Oversight and maintenance of PPS and internal/external service connection discovery and documentation, focusing on encryption and authentication of services, per FedRAMP & FISMA 800-53 rev 4 & rev 5 moderate baseline requirements.

Columbia, South Carolina Area

Senior Security Analyst specifically supporting NIST 800-53 (Security / Privacy Controls) assessment & NIST 800-70 SCC (Security Configuration Checklist) creation in support of FISMA / ARS 3.1 (Acceptable Risk Safeguards) audit requirements. This role requires me to stay abreast of current and emergent threats to the various platforms we have across our enterprise, as well as coordinate efforts to remediate shortfalls with the respective technology owners. Daily duties are STIG, SRG, and ARS 3.1 heavy, with a focus on coordinating enterprise level baseline configuration security requirements with respective platform and technology owners. Directly responsible for designing, documenting, and implementing company-wide Security Configuration Checklist (SCC) Adoption and Assessment Framework (CM-1, CM-2, CM-6) to address persistent annual FedRAMP / FISMA (High) / JSM / Section 912 audit issues, Deviations & Risk Docs, POA&Ms, and dispositioning compliance assessment methods. Work directly with HHS / CMS on the CMS AWS Cloud Initiative (Medicare in the Cloud) – Evaluation & analysis of Org SSP and AWS SSP for deltas with the MAC ARS CMSR (Pub 100-17).

Thousand Oaks, Ca

Systems and Security consulting.

Cyber Security Engineer supporting SPAWAR PMW 160 / Consolidated Afloat Network Enterprise Services (CANES). CANES SW 1.0.1, 1.2, SW3 / OB2 R&D, Deployment & Implementation. Comprehensive experience deploying and configuring physical and virtual network security services for CANES SW1.2, Software 2.X and CANES SW3 Baseline configurations, both virtual and physical. Extensive security appliance experience, including VMWare VCSA and VCenter, along with various Cisco technologies (ISE, WSAV). Engineered (and currently engineering) SW 1.2, 2.X, SW3 development environments for NETSEC testing and evaluation. Proficient in using Powershell WRT automation across the enterprise. Extensive experience deploying and configuring NetIQ SIEM & SAM technologies. HBSS 4.5, 4.5.7, 4.6.8, 4.6.9, 5.3.1, 5.9.X deployment, management, and administration. Basic shell scripting in RHEL 6.X and RHEL 7.3. Extensive utilization of Jira CM system. CANES NETSEC VM deployment and configuration (IPSMGMT, WSAV, ISE, SIEM, etc.) Engineer operating environments for compatibility with WSUS and YUM. CANES network hardware support and configuration, including Cisco 2800 series, 3800 series L3 switches. Experienced developer of fleet documentation CICD’s / ECR’s / POR Support for the CANES effort. Daily efforts conducted in E2C (Enterprise Engineering & Certification) development environment supporting managed and hosted systems and POR’s. Experienced Coordinator & Liaison for disparate teams in our enterprise. Familiarity with DON CIO information policies. NIST 800.53 RMF Risk Analyst certified, trained and capable. Excellent written and oral skills. Daily use of HBSS, ACAS, SCAP, STIGs. SQL 2008, 2k12, 2k16 deployment, management, and maintenance. CISCO 5525-ASA IDS / IPS management, configuration, and hardening.

Camp Pendleton North, California, United States

Sr. Security Engineer supporting the Marine Corps Internet (MCI) managing the West Coast Regional infrastructure of 24,000+ managed nodes. Manage & Remediate incident response across the IMEF domain. Delegate incident remediation procedures and policies to the warfighter. Perform Systems Security Administrator duties in support of MITSC West G-6 Cyber Network Defense operations. Duties include setup and administration MITSC West policy changes in HBSS per DISA guidelines and Marine Corps direction. Provide Information Assurance (IA), DISA STIG compliance, 800.53 control implementation, testing and validation. Duties as assigned. DoD8570.1 IAT2 rating. Work closely with ACAS team to combine discovery scans across the MCEN-N with ePO management capabilities. Apply all applicable STIGs, IAVM directives, and CTO instructions to the Cyber Defense architecture. Perform regular DISA/Navy required reporting, monitor applicable security resources for updated requirements and compliance directions including Fragmentary Order (FRAGO) 13 to Operations Order (OPORD) 05-01 HBSS Implementation, Computer Tasking Order (CTO)-07-015, Phase 2, CTO-12-17 Host Based Security System (HBSS), OPDIR 350-13, OPORD 12-1016, DISA Command Cyber Readiness Inspection (CCRI) experience. Information Assurance Implementation DoD Instruction 8500.01, 8520.2. DoD Information Assurance Certification and Accreditation Process (DIACAP). DISA Information Assurance Workforce Management, Oversight, and Compliance. ACAS 4.6 / 5.X certified. DISA HBSS 301 MR5 Certified.

Sacramento, California, United States

Support the USMC Tactical Language & Culture initiative securing language lab Information System environments, earning DIACAP accreditation. HBSS (SEP) Administrator responsible for multiple USMC language lab software security setups, configuration, and maintenance. Manage, STIG, maintain USMC DIACAP information systems. Manage and maintain Cisco 5505 / 5510 ASA protected network environment. Experience and expertise in designing, implementing, and troubleshooting network infrastructure and security. Provide remote and physical end-user IT support. This includes various software / hardware remediation and training as well as extensive troubleshooting. Desktop support, server configuration and support, backup strategies and implementation, active directory management, DNS management and maintenance, Replication, Cisco VPN technologies. Implementation of DISA security measures and controls. Assisted with ISO20000 and ISO9001 certification and compliancy. Field tech for 88th Army physical security systems. Provided extensive remote support to Folsom Dam secure network environment.