Supporting Security Operations at the General Services Administration• Managing the enterprise Vulnerability Disclosure and Bug Bounty Programs• Administrator and technical consultant for all container security implementations• SME for vulnerability scanning and remediation

Senior member of the Security Operations Team at a government agency responsible for the analysis, design, implementation and lifecycle management of the agency's Vulnerability Management tool suite.• Serves as Subject Matter Expert for agency enterprise operating system vulnerability and compliance scanning for 25,000+ assets• Administrator and technical consultant for all container security implementations• Conducts web application security assessments and gray box testing• Maintains data required to support metrics (i.e. software availability, vulnerability metrics, application performance, FISMA compliance)• Configure agency phishing scenariosCorporate Activities• Lead incident response activities for commercial customers requiring immediate assistance in response to ongoing intrusions or breach related events• Proactive Threat Hunting for IOCs in our SIEMs like ArcSight, FireEye HX, Splunk, and Kibana• Designed internal Bug Bounty Program for testing of corporate software products to encourage contributions from staff across multiple subject matter areas• Assessed reported bugs or vulnerabilities to identify gaps and/or areas for improvement• Serves as Team Lead for internal penetration tests of Telos commercial software• Coordinates recruitment efforts for project, corporate, and intern hires• Deployed Agile project management framework to Information Assurance divisionKey Accomplishments• Deployed agency enterprise operating system vulnerability scanning solution (Tenable Security Center)• Developed and maintained custom Content Management System security scanner• Performed web application penetration testing for agency owned and agency hosted applications including Democratic and Republican Presidential Transition Teams sites during 2016 Elections• Established scan schedule utilizing a combination of scripts and configuration changes to ensure that agency meets DHS requirements for 72 hour scan cycles

• Performed vulnerability scanning using Nessus Vulnerability Scanner monthly on 300+ machines (servers/networking devices/work stations)• Managed Continuous Monitoring efforts to maintain project Authority to Operate • Accountable for documenting management, operational and technical security controls in accordance with NIST 800-53• Sustained system security for four national offices: Suitland, MD; Greenbelt, MD; Asheville, NC; and Boulder, CO• Implemented Snort Network Intrusion Detection System for all four offices• Monitored network intrusion using Snort Network Intrusion Detection System• Deployed EIQ SecureVue Security Information and Event Management (SIEM) software• Audited logs and security incidents using EIQ SecureVue• Wrote technical documents: Contingency Plans, Service Level Agreements, System Security Plans for CLASS• Created briefings and reports (i.e. status of current Plan of Action and Milestones, PoAM) that were submitted to upper management