Larry P. Bunch Cissp, Ceh, Gcih Email & Phone Number

Florham Park, New Jersey, Us

Alexandria, Va, Us

Lead Security Engineer on a new U.S. Army cybersecurity initiative/platform currently in Research and Development that is scheduled to be fielded within the next few years. My responsibilities include but are not limited to:• Provide technical guidance for directing and monitoring information systems operations. Designs, builds, and implements network systems• Direct compilation of records and reports concerning network operations and maintenance. Troubleshoots network performance issues. Analyzes network traffic and provides capacity planning solutions • Monitor and responds to complex technical control facility hardware and software problems. Interfaces with vendor support service groups to ensure proper escalation during outages or periods of degraded system performance • Manage the purchase, testing, installation, and support of network communications, including LAN/MAN/WAN systems

Reston, Va, Us

Senior C&A Analyst to contribute to Project Tracking and Certification and Accreditation processes for the DISA NS2 and DISN Operational Support System (OSS)• Review proposed changes to the DISN OSS systems and evaluate the impacts of those changes to the Authority to Operate (ATO), • Develop all security documentation required to obtain an ATO in accordance with DoD and DISA security policy and regulations and the DITSCAP/DCID/DIACAP requirements and procedures• Develop, update, review, analyze, and submit UC DIACAP and FISMA requirements • Consistent and accurate reporting of IA security requirements• Review relevant security documentation for DISN programs, systems, and networks with a focus on C&A and IA security for the DISN OSS and prepare technical discussion papers documenting the results of the reviews• Review all proposed DISN OSS changes to ensure they are compliant with the DISN OSS Security Architecture and posture and the DISN Security Classification Guide (SCG)• Maintain and update the DISN OSS information within the Vulnerability Management System (VMS)• Serve as technical advisor to ensure a balance between technical and security constraints and DISA OSS Division business objectives• Audit and identify UC services, applications, programs, systems, personnel, and networks that are not adhering to appropriate laws, policy, and guidance• Develop the IA Strategy Plan• Review, research, development and maintenance of Security Classification Guides for programs, systems, and networks• Research, development, staffing/approval and exercise of the Continuity of Operation s (COOP) Plan• Assist in audits to prepare assets or sponsored assets for the DISA FSO Command Cyber Readiness Inspection (CCRI), SAVs, C&A, DSS, and or any other DoD component inspections.• Research and Integration of New Technologies• Develop, review and update IA Standard Operating Procedure (SOP), Tactic Techniques and Procedures (TTP).

• Conduct risk assessments and gaps analysis of clients security posture• Recommend mitigation strategies• Provide detailed report of findings• Documenting, and recommend mitigation strategies according to industry best practices• Development or, assist the in the development of policies and procedures • Recommend new and emerging technologies and products to client• Subcontracting services to include: Instructor/Trainer information security classes (CISSP and Security+)• Develops or assist in the development of cyber-security/awareness training programs

C&A

San Francisco, Ca, Us

Senior Systems Engineer Organizing planning, coordinating and directing security certification, systems evaluation tests and documents, systems certification and accreditation (C&A) in accordance with the Department of Defense Intelligence Information Systems Certification & Approval (DODIIS) and Department of Defense Information Assurance Certification & Accreditation Process (DIACAP).* Implementing requirements to ensure systems compliance with the Department of the Army's Information Assurance Vulnerability Alert (IAVA), DODIIS and DIACAP processes.* Serve as a focal point for all IA Security and C&A related issues while managing complex security programs in diverse areas to include: • Information Security• Certification and Accreditations • Operations Security• Foreign Disclosure• Cross Domain Solutions• Special Access Programs

Herndon, Virginia, Us

Responsible for obtaining and maintaining subject matter expertise on entities of interest in relation to computer and network intrusions. This includes tracking all relevant intrusion events/reports, understanding intruder tactics and methodologies.

Us

* Understand customer problems and use-cases and implement solutions to address them * Create and maintain a knowledge base of customer use-cases and solution content * Research, analyze and understand novel log sources, such as information leak prevention systems, or identity management solutions * Research and develop content for Solution Packages, including correlation rules, dashboards, reports, visualizations, etc. * Deliver world-class solution packages to customers

Experienced Cyber Security Professional; in the areas of:development, design, implementation, and analysis of local and wide area network security solutions. Currently, Larry is working with McAfee on several Host Based Security System (HBSS) projects. Scope of Responsibility:• Implementing and configuring software and appliance-based products in enterprise and Government environments• Working within organizations to develop and implement effective network, and application security solutions • Evaluating, designing, advising, and implementing products and controls into various platforms• Performing knowledge transfers and training in security awareness• Conducting network security assessments • Maintaining security monitoring and reporting appliances• Maintaining knowledge of and communicating changes in security regulations, best practices, countermeasures, compliance, and threats• Preparing technical designs

Cyber Security EngineerServes as a technical lead in order to architect, deploy, and administer Cyber Security related solutions. Serves as a liaison between DOE EM cyber-security and LE/CI. Assist in the development of policies in support of certification and accreditation (C&A) programs for Federal Government customers.• Compiles and maintains technical and administrative security plans, policies, and guidelines according to Federal (NIST) for the certification and accreditation (C&A) processes.• Collects and translates information security requirements into system security documentation.• Performs some IDS monitoring and policy tuning.• Coordinates the efforts of customer engineers, Intelligence Community, administrators, and management to describe and evaluate standard security practices.• Develops and provides Cyber-Security/Awareness training.

Section Chief:• Supervise the deployment, installation, operation, and maintenance of multi functional/multi user information processing systems.• Perform duties as chief for the tactical DMS• Determine requirement, assign duties, coordinates activities of personnel engaged in information system analysis.• Develop and administer on site training programs. Compile output reports in support of information systems operations.• Supervises, performs maintenance management and administrative duties related to facility operations, maintenance, security and personnel. • Supervise ISSO functions. Provide verbal and written guidance and direction for the installation, operation and maintenance of specified battlefield information services. • Provide technical assistance; resolve problems for information services support personnel, functional users and functional staff. Responsible for a team of 7 – 12 soldiers.

Senior Network Security AnalystAssigned to monitor and protect several large TCP/IP networks in support of the DoD. • Review logs/alerts utilizing numerous tools in order to identify intrusions, intrusion attempts, poor security practices and malicious logic. Such as: Buffer overflows, rootkits, DDOS, worms/trojans and unencrypted sessions• Compiling information and preparing computer security incident reports including preparing or assisting in the preparation of daily/weekly/monthly reports • Implementation of Port/IP blocks that require special attention. • Assist junior members of the team, both government and contractor; in detected intrusions and what type those intrusions are. • Providing technical expertise during computer forensic analysis under the direction of the Information Assurance Manager, law enforcement, military intelligence or other government personnel. • One of the primary trainers for all newly hired analysts.

Aa, Internetworking Technologies

Diploma