Laura Meagher Email & Phone Number

Duties Include:• Maintaining the ACAS scanner for our pre-production and production environments (both secret and unclassified) which includes: uploading the latest plugins (production), uploading results via ACAS to VRAM and CMRS, performing scheduled and on-demand scans as requested.• Maintaining and editing all ACAS documentation to distribute to customer sites• Creating weekly ACAS scan vulnerability reports for distribution to key personnel to ensure patches are applied in a timely manner • Performing SCAP Scans and DISA STIG checks as requested• Assisting the ISSO in reaching compliance with the latest released IAVMs• Utilize WSUS to approve/apply updates to all Windows Operating Systems in both the pre-production and production environments• Assisting in applying patches to all Windows Operating systems in both the pre-production and production environment• Assisting with trouble tickets from customer sites throughout the country via Remedy tickets which include: ACAS issues, patch management issues and system management issues as needed• Manually downloading and applying 3rd party software to systems for easy distribution.• Providing test reports for all newly released software in order to provide customer sites quality assurance of newly released software versions• Data Transfer Agent (DTA) duties as needed to move software and patches from low to high systems

Charleston, South Carolina, United States

Duties Include:• Provide IAM Level III support• Perform Cyber Security Certification and Accreditation (C&A)/Assessment and Authorization (A&A) of new and existing systems• Identify, refine, and document cyber security requirements and support the C&A/A&A of systems, software, and services in accordance with relevant guidance to include DoDI 8500.01, "Cybersecurity", DoDI 8510.01 "Risk Management Framework (RMF) for DoD Information Technology (IT)", and Intelligence Community Directive 503 (ICD 503) Information Assurance controls as they pertain to the DIACAP, the Risk Management Framework, and the ICD 503 processes• Plan, perform, and analyze cyber security Test and Evaluation (T&E) events for systems, software, and service.• Prepare and review cyber security documentation and establish procedures and processes to monitor progress• Perform vulnerability management activities and Continuous Monitoring via DoD and DISA mandated and/or approved tools such as ACAS and SCAP to identify potential security issues in software configurations in order to recommend corrective actions, and communicate issues to leadership in regards to alerts, bulletins and technical advisories. • Perform patch management on assigned system as the Information System Security Officer (ISSO) in order to keep system up to date and free from potential attack vectors.• Maintain annual compliance requirements as mandated by the Federal Information Security Management Act (FISMA)

Charleston, South Carolina Area

• Perform Information Assurance analysis in preparation for certification and accreditation within the DHA environment, which includes both Walter Reed National Military Medical Center and Fort Belvoir Community Hospital.• Cover all technical information security aspects including, but not limited to, identifying risks, providing mitigation plan of action, configuration of devices in accordance with STIG settings and analysis of system design.• Assist with authorization and accreditation issues that may be preventing the system from receiving an ATO.• Develop custom mitigation solutions for enterprise vulnerabilities.• Assist the Enterprise Incident Response team in detecting and responding to site incidents within the DHA.• Provide onsite and remote mitigation and remediation support to DHA sites in preparation for certification and accreditation within the DHA.• Utilize IA Assessment tools such as ACAS and SCAP to identify vulnerabilities on the DHA networks.• Evaluate and analyze risks identified in the POA&M and assist DHA in mitigating the vulnerabilities in effort to reduce the risk.• Assist DHA client sites with configuration management of information processing systems that relate to information assurance in accordance with DISA policies and STIGs.• Utilizing eMASS and Risk Management Framework for tracking purposes.• Compiling reports and assessments from test events performed within the DHA for analyzing purposes using the Honeywell Information Assurance Tester (HIAT).

Charleston, South Carolina Area

Responsible for conducting A&A activities and evaluating the overall security posture of the MHS WLAN. Specific responsibilities include: • Adhering to the DIACAP/RMF process (DHA processes to include:)o A&A Kickoff and subsequent meetingso ATO effort procedureso Annual review effort procedureso Risk assessment effort procedureso Templates and other artifact documentation procedureso IA controls (DIACAP/RMF) administration in eMASSo DIACAP to RMF conversion (IA controls and artifacts)o Self-assessment testing procedures in accordance with A&A effortso POA&M administration in eMASS to include Fix and/or mitigate findings that were identified and upload information as evidence for fixed and/or mitigate findingso Tasker Reporting• Sustainment activitieso Continuous monitoring with monthly ACAS scanso IAVM management and reporting (i.e. POA&M management if need be)o Patch management to include software testing and stakeholder notificationso Recommend process improvements (IA processes/procedures; Lab procedures)• DoD IA standards compliance (laws, regulations, directives, instructions)• Fielding IA problem resolution support (any day to day problems/issues that are IA related)• Making information available to project stakeholders (DHA/SPAWAR/LAB – IA chain of personnel) in a timely manner (i.e. bring IA updates to WLAN IA Weekly Monday Meeting, etc.)• Identifying risk and opportunities that may impact the project

Charleston, South Carolina Area

Pentagon - Joint Staff

• Perform vulnerability assessments for the J6 network utilizing scanning tools such as eEye Retina and ACAS.• Create pivots to analyze and compile scan results on bi-weekly basis utilizing Microsoft Excel• Develop weekly Powerpoint presentations to present to the Colonel outlining the top vulnerability findings, systems that need the most attention, and providing statistics to show the vulnerability trends.• Utilize VMS to track IAVM compliance, Plan of Action and Milestones and create vulnerability reports as well as create user accounts• Review the Plan of Action and Milestones provided by the Security Operations team , apply corrections and prepare documents for signature and approval for the Colonel.• Provide input to an internal Sharepoint site for IAVM tracking as well as Plan of Action and Milestones.• Assist the Certification and Accreditation team by reviewing software accreditation scans and providing input and recommendations as needed.• Update the databases to track all vulnerability statistics on a bi-weekly basis

National Guard Bureau - Arlington Va

• Perform vulnerability assessments utilizing eEye Retina, DISA Gold Disk, Nessus and other DOD approved tools. • Develop reports illustrating the most vulnerable systems on the network and then send those reports to asset owners for mitigations. • Remove unauthorized software/applications/documents from users machines• Provide Vulnerability reports to various groups for mitigation• Manage antivirus client deployment and virus definitions update• Manage and maintain McAfee ePolicy Orchestrator• Work issues through Remedy tracking systems involving software approvals and Certificate of Networthiness requests• Manage WSUS and SCCM servers to push updates to servers and workstations to mitigate vulnerabilities• Update and patch images for workstations and servers• Deploy the latest Symantec Endpoint Protection to workstations and servers• Perform Information Assurance (IA) tasks and functions on a LAN environment that supports over 3000 users• Support Microsoft environment: Active directory-User accounts, security groups, user rights• Utilize Qtip scanner to identify malware, Unauthorized Software, and Infection alerts on workstations and servers• Utilize SCAP Compliance Checker to identify Cat 1, 2, and 3 on servers and workstations

Air Force Research Laboratory - Rome Ny

• Working with a group of security professionals within the Network Operations Center responsible for maintaining computer and communication security at the Air Force Wing level.• Assist civilian Information Assurance Manager and Communication Squadron Commander on changes and interpretation of Air Force Department of Defense (DoD) regulations and other needs.• Responsibility for downward directed Air Force and DoD orders (TCNO/NTO/MTO/DCO, etc…) distribution and compliance process.• Responsibility for the account creation process and DoD Form DD2875 tracking for Defense Research and Engineering Network (DREN) and Non-classified Internet Protocol Router Network (NIPRNet).• Assist with vulnerability detection and remediation process using eEye Retina network scanning and Tenable SecurityCenter Compliance Monitoring.• Assist in documenting Information Assurance policies and procedures as well as enforcing policies to the information system users.• Conduct yearly training on DoD Information Assurance Awareness for the entire laboratory.• Working with our antivirus and host-based intrusion detection systems.• Providing monthly contract metrics and contract deliverable reports regarding Information Assurance activity such as DoD orders and Antivirus activities.

Bachelor'S Degree, Cyber/Computer Forensics And Counterterrorism

Activities and Societies: Basketball and Softball

Master’S Degree, Cybersecurity - Intelligence And Forensics