Kyle Simmers Email & Phone Number

Baltimore, Maryland Area

Baltimore, Maryland Area

I serve as the IT Security Team lead for one of our Public Sector Healthcare teams. In my role I manage and lead IT security teams of 4-5 Associates and subcontractors in performing security controls testing according to FISMA, DISA STIGs, and NIST 800-53 requirements on 4 engagements. I am looked to as the technical controls testing subject matter expert by members of our account team and am leveraged across projects and accounts to provide expertise and value to complete delivery for multiple clients as well as consult on solutions and capabilities for potential new work.• Supervise the planning, development, and implementation of a comprehensive program to perform testing and assessments of security and privacy controls• Performed internal penetration and attack testing and Red Team activities at contractor sites, utilizing a variety of penetration testing tools and manual methods in an attempt to compromise systems or gain access to sensitive information available on the network• Simulated an insider threat scenario through managed asset testing. Testing was completed with Red Team themes to remain undetected and also evaluate the incident response processes in a compressed timeframe over 3-4 days• Created and facilitated the ROEs with contractors to establish breadth and depth of scope for testing• Authored whitepapers that provided guidance and recommendations for best practices when implementing new technology, applications, virtual desktop environments, and their impacts to the security posture• Oversaw the production of high-quality deliverables for clients with focused recommendations and collaborated with them to explain technical concepts, vulnerabilities, associated risks, challenges, and remediation options in understandable terms to facilitate risk-based decisions• Led business development efforts to grow the cyber security business (Capture Manager, Pricing Lead, Whitepaper Lead) for proposals and marketing totaling $23M in value

Baltimore, Maryland Area

I served as the IT Security Team lead for one of our Public Sector Healthcare teams. In my role I managed and led IT security teams of 4-5 Associates and subcontractors in performing security controls testing according to FISMA, DISA STIGs, and NIST 800-53 requirements on 4 engagements. I was looked to as the technical controls testing subject matter expert by members of our account team and was leveraged across projects and accounts to provide expertise and value to complete delivery for multiple clients as well as consult on solutions and capabilities for potential new work.• Performed internal penetration and attack testing and Red Team activities at contractor sites, utilizing a variety of penetration testing tools and manual methods in an attempt to compromise systems or gain access to sensitive information available on the network• Simulated an insider threat scenario through managed asset testing. Testing was completed with Red Team themes to remain undetected and also evaluate the incident response processes in a compressed timeframe over 3-4 days• Created and facilitated the ROEs with contractors to establish breadth and depth of scope for testing• Authored whitepapers that provided guidance and recommendations for best practices when implementing new technology, applications, virtual desktop environments, and their impacts to the security posture• Oversaw the production of high-quality deliverables for clients with focused recommendations and collaborated with them to explain technical concepts, vulnerabilities, associated risks, challenges, and remediation options in understandable terms to facilitate risk-based decisions• Led business development efforts to grow the cyber security business (Capture Manager, Pricing Lead, Whitepaper Lead) for proposals and marketing totaling $23M in value

Baltimore, Maryland Area

• Performed technical controls testing on a selection of Windows and UNIX servers, Firewalls, and Intrusion Detection Systems (IDS)• Conducted policy and procedure controls testing for file integrity monitoring, security management, contingency planning, vulnerability management, anti-virus implementations, application whitelisting, mobile device encryption, and access control• Created deliverables such as detailed testing matrices and work-in-progress grids for the client and contractor, in addition to external work papers for the Office of Inspector General• Performed managed asset penetration testing at contractor sites, utilizing a variety of penetration testing tools in an attempt to compromise systems or gain access to sensitive information available on the network

Hunt Valley, Md

The Information Assurance team at AAI (part of Textron Systems) was tasked with supporting the certification and accreditation of UAV products in accordance with the DoD’s DIACAP and RMF frameworks. I competed this mission by utilizing scan tools such as Retina, Nessus, SCAP, Nmap, and conducting manual assessments of the systems and applications against STIG requirements.• Led and coordinated system vulnerability analysis efforts for 4 $5M+ DoD UAV contracts to support the DIACAP and RMF certification process• Conducted in-depth analysis of the results in order to determine false positives, not applicable, and items requiring justification for risk acceptance as well as findings• Developed remediation and mitigation plans and implemented them through the creation of scripts to be used for a deployable automated remediation package• Created a hardened COTS Windows 7 deployable image that was used as a baseline across various programs

Richmond, Virginia Area

The Information Technology Development Program (ITDP) was a rotational program that placed college hires in multiple roles to allow them to experience different teams and roles and find the fit that was best for them. My first placement was with the Service Asset and Configuration Management team which was tasked with ensuring that the assets required to deliver services were properly controlled, and that accurate and reliable information about those assets was available when and where it is needed. My primary responsibilities consisted of managing the configuration management database, providing customer support in order to meet the requested needs of users encountering errors and needing to update information in the database, and completing regression testing for standard code releases to ensure functionality of HP Service Manager. • Received a Capital One Integration Excellence award for my efforts in aiding the HSBC integration by holding help and learning sessions with internal customers to ensure the data integration was performed properly and that the data in the CMDB was an accurate representation of the enivorment• Identified areas to improve data quality within HP Service Manager and tested requests for changes to provide a solution• Led internal customers through a data migration and integration with the acquisition of ING Direct and its assets and services• Worked on the integration of the uCMDB to replace the standard CMDB in order to provide more accurate and useful data around the assets at Capital One• Participated in career development trainings and attended presentations from senior leadership

Greater New York City Area

I worked on a small team consisting of a Senior Manager, Partner, and subcontractor conducting a multi-factor authentication baseline assessment of a healthcare organization against NIST 800-63 Level 3. The project was an initial win with the goal to use it as a gateway to win a significant amount of add-on work by directly leveraging the results of the project and our relationship that we built with the client. My primary responsibilities included developing the project charter, assisting in developing the assessment matrix, and participating in interviews of the sub-organization security subject matter experts to build a holistic picture of their compliance areas and gaps.• Received a KPMG Encore Award for exceeding project expectations and completing project milestone documents ahead of schedule• Granted and internship extension due to my high performance to allow me to see through the completion of the project• Assisted in building the assessment matrix and questionnaire based on NIST 800-63 requirements. The matrix and questionnaire were used to build the complete final deliverable once all sub-organization results were aggregated• Participated in interviewing the sub-organization security subject matter experts utilizing the questionnaire in order to baseline the sub-organizations on their compliance level with NIST 800-63 • Performed project management activities to support the project including developing the project charter, scheduling meetings with the client, and updating the project plan

University Park, Pa

• Worked with professors to gather requirements and develop custom solutions for their needs• Provided course management system support and training for Angel course management system• Trained on useful computer applications and tools

Bachelor Of Science (B.S.), Information Science And Technology

Activities and Societies: Infomation Assurance Club, Security and Risk Analysis Club, Student Programming Association, Homecoming Co-Chair.

Bachelor Of Science (B.S.), Security And Risk Analysis

Master Of Science (M.S.), Cybersecurity