Kathy Mcdaniel Email & Phone Number

Fairfax, Va

Serve as a SME on matters pertaining to computer, network and communications security, information and cyber security, general oversight, compliance and training in the IT security areaServe as a team member for oversight, assessment, and evaluation of the design, development, and implementation, and update of the IT Security Programs, (for example, the Technical Security Support, Training and Awareness, or Customer Service Programs)Perform assessments of agencies’ cyber security program and infrastructure to ensure confidentiality, integrity and availability of the systems, networks, and dataLead on project which involves conducting a presentation for our Fed Govt Client managers, personnel and stakeholders, along with NG personnel. The presentation consists of discussing the processes and procedures on facilitating assessments of Fed agencies’ Computer Network Defense Security Operation Centers relating to Incident ResponseManage the mapping of complex technical requirements, functionalities, and capabilities to NIST 800-53 Rev4 and NIST 800-61 security controls, FISMA, OMB and US-CERT to ensure compliancy with federal standards, policies, and proceduresReview and revise the workbook used to assess the agencies’ IR capabilities Manage projects from the Assessment Team using Redmine to ensure completion of projects as well as to confirm timelines and deliverables are being metResponsible for developing and issuing policies and related standards in accordance with the NIST and other applicable fed govt requirements, guidance, and directives Develop procedures, awareness programs, and supporting templates to aid stakeholders in developing certification and accreditation and/or System Development Life Cycle (SDLC) artifactsSupport the Chief Information Officer (CIO) in making the accreditation decision by providing written analysis of a system's compliance with applicable policies, standards, and procedures

Germantown, Md

 Developed QA metrics and associated processes to assess SDLC, testing, and configuration management compliance with requirements Analyzed short, medium, and long-range projects for solutions of complex operational or policy issues in areas such as information security, information security reporting, systems development life cycle, quality assurance, and others as directed Monitored organizational, legislative, administrative, and technological changes that affect information systems' standards and related processes and impact upon future planning to meet the needs of the agency Represented the organization in conferences and technical discussions with professional, public and private organizations with a responsibility to further the understanding, clarify the position, and to develop a coordinated approach to problem solution, recommending new policy as appropriate  Monitored and analyzed data produced in security management applications such as McAfee ePO 4.5, FireEye, Snort, Source Fire, SIEM-NitroSecurity, Solera,Palo Alto, BlueCoat, CTFO Sandbox,and Firewall logs Identified potential threats based on agency utilized hardware and software. Firewalls, Intrusion Detection Systems, BlueCoat logs, Unix/Linux (Centos) for detail assessment Coordinated with JC3 and investigate security incidents reported against agency networks Provided Incident Response (IR) support when analysis confirms actionable incident Investigated, documented, and reported on information security issues and emerging trends

Germantown, Md

 Developed QA metrics and associated processes to assess SDLC, testing, and configuration management compliance with requirements Analyzed short, medium, and long-range projects for solutions of complex operational or policy issues in areas such as information security, information security reporting, systems development life cycle, quality assurance, and others as directed Monitored organizational, legislative, administrative, and technological changes that affect information systems' standards and related processes and impact upon future planning to meet the needs of the agency Represented the organization in conferences and technical discussions with professional, public and private organizations with a responsibility to further the understanding, clarify the position, and to develop a coordinated approach to problem solution, recommending new policy as appropriate  Monitored and analyzed data produced in security management applications such as McAfee ePO 4.5, FireEye, Snort, Source Fire, SIEM-NitroSecurity, Solera,Palo Alto, BlueCoat, CTFO Sandbox,and Firewall logs Identified potential threats based on agency utilized hardware and software. Firewalls, Intrusion Detection Systems, BlueCoat logs, Unix/Linux (Centos) for detail assessment Coordinated with JC3 and investigate security incidents reported against agency networks Provided Incident Response (IR) support when analysis confirms actionable incident Investigated, documented, and reported on information security issues and emerging trends

Washington D.C. Metro Area

 Responsible for diagnosing and/or resolving problems in response to customer reported incidents via trouble ticket; escalating problems to the Lead or Supervisory IT Specialist as appropriate Oversaw Help Desk ticket activities; and coordinated device files for software applications following established procedures Solved problems and makes decisions on a daily basis relative to Help Desk responsibilities. Ensured that effective Help Desk representation takes place for the coordination of work processes and projects with other departments and divisions Documented and provided feedback on trends associated with customer support Identified and broke down problems using structured problem resolution approaches Provided groups and one on one systems/software applications training to customer as required Coached junior IT Specialists in resolving highly complex IT problems and systems issues Provided a variety of IT customer support services essential to the effective performance of systems Created shift reports (status, shift down, deployments) Maintained and monitored Remedy queues Resolved daily issues of a complex scope that impact the team and overall business objectives

Washington D.C. Metro Area

 Sole tester for the Network Modernization Office. Ran testing program for 14 projects, including creating project standards. Examples of some of the projects are creating a new file server on Celerra, creating a new high availability print server, creating a new backup and recovery system with HomeBase, creating a new Exchange 2010 server Directed engineers, insuring end to end testing functionality and comprehensive testing. Performed all aspects of new hardware and software integration, functionality, informal and formal testing/validation for the Network Modernization projects prior to installation in the Pentagon Provided testing and validation for previously developed software and COTS products.  Developed and executed test plans, test procedures, and test results and evaluation reports documentation  Created, developed, maintained and implemented Security Documentation Provided support with data collection and reporting Knowledgeable of FISMA and NIST regulations Performed and/or evaluated vulnerability scans using DISA Gold Disk and eEye Retina in production and lab environments  Performed vulnerability management (scanning, patching, remediation) Provided application level lockdowns and provide direction based on DISA STIGs Performed Security Test and Evaluation (ST&E), directed remediation efforts, built Risk Assessment Reports and track POA&M.  Planned, designed, developed, tested, implemented, and managed Internet and extranet activities including systems/applications development and technical management of Web sites Monitored functionality, security, and integrity of Internet services Troubleshot and resolved technical problems with the design and delivery of Internet services  Researched, evaluated, and reported on new and emerging developments in the Internet services area and recommended adoption of new technologies

Indianhead, Md

 Performed Interoperability Testing & Certification for vendors or agencies that are interested in becoming certified and accredited with DoD  Performed test and evaluation of systems based on the vendors’ or agencies’ certified requirements  Observed the testing of vendors’ or agencies’ data, product, or system in a test and operational/production environment to ensure it successfully meets its objectives  Performed the Certification and Accreditation process in accordance with NR-KPP; the Certification and Accreditation process includes writing the Interoperability Certification Evaluation Plan (ICEP), Test Plan, and Assessment Reports Performed Defense Information Assurance Certification and Accreditation Process (DIACAP) for testing vendors or agencies products in accordance with DISA’s Security Technical Implementation Guides (STIG’s) to ensure the products are in compliance with DOD’s regulations and requirements ; IA Process includes: Design, Implementation, Configuration, Validation, Operational Sustainment and Reporting Prepared the DIACAP Scorecard Provided support with data collection and reporting Analyzed network traffic using Sniffer Developed a Host Based Security System (HBSS) in a test environment to monitor its functionality before development in a production environment Gave presentations and briefings for management, team leads and Action Officer

Washington D.C. Metro Area

Prepared, developed, coordinated, and integrated all levels of plans and schedulesSupervised the help desk staff to maintain the highest level of customer service for our end users Interfaced with managers and end users to ensure their needs are being metCoordinated team projects and tasks and prioritized as neededResponsible for managing the IT asset inventory Managed the Service Desk Express (SDE) incident tracking system for end users support requests. Managed and performed network analysis and support tasks (design/selection, installation, configuration, troubleshooting, and network analysis) in support of user needs for both LAN and mainframe based systems used by OCFO agenciesWorked with several protocols when configuring servers, workstations, and network appliancesInstalled, configured, maintained, troubleshoot, diagnosed, and resolved problems with Microsoft Windows 2003/2008/WinNT 4.0 Servers, Active Directory, OU infrastructure, GPOs, Files & Print servers, WINS, DNS & DHCP servers, Application servers, Exchange server, Domain Controllers, SQL servers, Lotus Notes & Domino server, blade servers, Backup server, SAN & NAS serversConfigured network interface cards, allowing servers to communicate on our enterprise network using connection and connectionless protocols including but not limited to TCP, FTP, UDP, DHCP, HTTP, SMTP, and DNSMonitored over 200 servers using Solarwinds and TCP ports being opened and used by applications using TCPViewLooked at ports and packets to analyze and troubleshoot connectivity issues between client server applications using WiresharkWorked in a Server Room environment, racking servers, connecting them to power and data switches, connecting KVM Switches, installing windows and patching serversImplemented and configured network upgradesAdhered to network backup and recovery policiesSupervised the complex project of restructuring the server room and the network infrastructure, 

Bachelor Of Science (Bs), Computer Networking

Associate Of Arts (Aa), Business Administration