Ken Cuddeback Email & Phone Number

Greater Salt Lake City Area

Greater Salt Lake City Area

Greater Salt Lake City Area

Part of the Future ICBM Program - Ground Based Strategic Deterrent (GBSD) under which BAE Systems augments organic government resources by providing breadth and depth of capabilities for system engineering and integration, risk management, technical assessment, acquisition program management, strategy development, organization and change management, interface with operations and logistics, business analysis, and mission effectiveness. I'm building the Cybersecurity Program for GBSD. Documents… Show more Part of the Future ICBM Program - Ground Based Strategic Deterrent (GBSD) under which BAE Systems augments organic government resources by providing breadth and depth of capabilities for system engineering and integration, risk management, technical assessment, acquisition program management, strategy development, organization and change management, interface with operations and logistics, business analysis, and mission effectiveness. I'm building the Cybersecurity Program for GBSD. Documents include: Cybersecurity Strategy, Program Protection Plan, Clinger-Cohen compliance, are just a few of those documents required for MS-A. Develop and coordinate a tailored set of GBSD Risk Management Framework Cybersecurity controls consistent with CNSSI No. 1253, NIST 800-53, and DoDI 8510.01. Support joint DoD/DOE nuclear weapon life-cycle activities in accordance with DoD Directive 3150.1 and DODI 5030.55 as well as any other relevant U.S. law, DoD, CJCS, United States Air Force (USAF), or other Service Component, directive, policy, instruction, or guide. Show less

United Arab Emirates

Provide expert advice and recommendations to the development team in establishing initial CSOC operational capabilities. Provide day-to-day management of all CSOC personnel identified to meet program objectives. Responsible for definition and collection of metrics to support system availability. Identify opportunities for continual improvement, including industry best practices and recommends changes to the CSOC systems and reporting process. Responsible for the development and collection of… Show more Provide expert advice and recommendations to the development team in establishing initial CSOC operational capabilities. Provide day-to-day management of all CSOC personnel identified to meet program objectives. Responsible for definition and collection of metrics to support system availability. Identify opportunities for continual improvement, including industry best practices and recommends changes to the CSOC systems and reporting process. Responsible for the development and collection of metrics for the CSOC processes to ensure program adherence to reporting criteria. Key Achievements:• Collaborated with the contracted systems integrator to advance and improve the $400 million mission development program.• Led initiatives to identify mission design shortfalls, which improved system performance.• Developed and implemented staffing plans, to include work surge requirements.• Advised CSOC Director in identifying and executing mission requirements.• Identified skill sets of team members and developed training programs to bolster individual capabilities.• Managed a team of 30 comprised of cyber analysts, threat intelligence analysts, and engineers.• Initiated development of national level cyber security policies and procedures.• Increased output by 100% through process standardization and improving work. Show less

Fairfax, Va

Primarily responsible for managing the integration of TSA systems into the TSA Security Operation Center (SOC) for continuous log monitoring and log retention. Effectively communicated in both writing and verbally to coorrdinate with ISSO’s, System Owners, Executive staff, and engineering staff in on-boarding new device feeds. Also responsible for security incident response leadership, management, and task assignments of dedicated Analysts and Engineers. Developed and prepared monthly reports… Show more Primarily responsible for managing the integration of TSA systems into the TSA Security Operation Center (SOC) for continuous log monitoring and log retention. Effectively communicated in both writing and verbally to coorrdinate with ISSO’s, System Owners, Executive staff, and engineering staff in on-boarding new device feeds. Also responsible for security incident response leadership, management, and task assignments of dedicated Analysts and Engineers. Developed and prepared monthly reports for all systems.Key Achievements:• Decreased project ramp-up time for onboarding new components by 30% through enhanced project planning with customizable sections around engineering capabilities and delivery method. • Integrated 10 new, medium sized systems, into the existing TSA SOC policies and procedures for operational consistency, which complied with TSA and DHS policies.• Managed project timelines across multiple teams to ensure tasks were completed according to the master project schedule.• Worked closely with Director level Government employees and contractors to manage expectations so all stake holders understood the project status.• Developed 20 analysts and 10 engineers through training on new systems being integrated into the TSA SOC. Show less

Fairfax, Va

Primarily responsible for logic development within the SEM tool to detect and identify nefarious traffic traversing the customers network. Also responsible for security incident response leadership and fourth-level security and SOC network support. Responsible for management and task assignments of the operations staff on each shift. Functioned as the escalation point for the Analysts and Security Engineers and provided training and direction as needed. Key Achievements:• Developed… Show more Primarily responsible for logic development within the SEM tool to detect and identify nefarious traffic traversing the customers network. Also responsible for security incident response leadership and fourth-level security and SOC network support. Responsible for management and task assignments of the operations staff on each shift. Functioned as the escalation point for the Analysts and Security Engineers and provided training and direction as needed. Key Achievements:• Developed detection mechanisms for existing exploits and Zero-Day exploits improving detection confidence by 25%. • Reverse engineered malware to determine exploits characteristics. • Actively monitored, tuned and configured the Security Event Monitoring (SEM) tool in order to identify malicious traffic on the customer’s network, improving newer analysts’ ability to detect potentially problematic traffic by 20%.• Developed and documented processes and procedures for day-to-day tasks, which assisted with standardization, shortened analysis time by 15%, and reduced errors. Show less

Reston, Va

Promoted to manage and lead the analysis Tiers 2 and 3. Managed delivery of 24x7, real-time network security analysis through detection and remediation of all security related issues. Worked actively with a broad vendor-neutral support of firewalls, intrusion detection systems and integrated security appliances to global enterprise federal clients. Key Achievements:• Developed standardized processes and procedures for day-to-day tasks, which shortened analysis time, and… Show more Promoted to manage and lead the analysis Tiers 2 and 3. Managed delivery of 24x7, real-time network security analysis through detection and remediation of all security related issues. Worked actively with a broad vendor-neutral support of firewalls, intrusion detection systems and integrated security appliances to global enterprise federal clients. Key Achievements:• Developed standardized processes and procedures for day-to-day tasks, which shortened analysis time, and reduced errors.• Developed training for all new and existing analysts. This training included assessments of knowledge and placed them in the correct training path and provided the analyst a number of the Security's industry recognized certifications.• Handled investigations or analysis of complex tickets by working with the appropriate engineers or outside organizations in order to solve incidents and network events.• Directed staff in tuning requests for firewalls, IDS, SEM tools, event filters, and correlation rules. Monitored and analyze SEM tools for activity/events as per the policy of the customer and external intelligence agencies. This resulted in ticket generation of a higher quality for the customer and reduced false positives alerts.• Performed open-source research into visible threats in the environment and other threats that could be seen in the customer space. Developed SEM logic to detect where possible.• Worked with the appropriate engineers or outside organizations in order to solve complex incidents and network events.• Supported the on-call Incident Response Manager or Service Delivery Manager when necessary for resolution of incidents or complex events.• Developed tuning requests for firewalls, IDS and SEM tools.• Monitored external threat sources and associate threat information with traffic identified as suspicious.• Developed advanced event filters, correlation rules, and channels. Show less

Hill Air Force Base, Clearfield, Ut

Performed daily engineering task with firewalls, proxy servers, and IDS/IPS systems to maintain overall network security from the perimeter by adhering to documented Air Force policies.Key Achievements:• Sustained security compliance (patches, updates, anti-virus) on the division’s workstations and servers.• Upheld VPN Concentrators base wide.• Built and serviced the organizations’ SAN.• Monitored backup system and ran test restorations.• Assisted in creating… Show more Performed daily engineering task with firewalls, proxy servers, and IDS/IPS systems to maintain overall network security from the perimeter by adhering to documented Air Force policies.Key Achievements:• Sustained security compliance (patches, updates, anti-virus) on the division’s workstations and servers.• Upheld VPN Concentrators base wide.• Built and serviced the organizations’ SAN.• Monitored backup system and ran test restorations.• Assisted in creating security policies for the local Air Force organization.• Maintained the facility’s Intrusion Detection System (Snort, Symantec ITA) , the Intrusion Prevention System (Sourcefire), and proxy servers.• Developed Business Continuity Plan and Disaster Recovery Plan Show less

Master'S Degree, It Management

Bachelor Of Science (B.S.), Telecommunications And Business Education