Loilette Loderick Email & Phone Number

Washington, Dc, Us

Columbia, Md, Us

Perform threat hunt operations using known adversary tactics, techniques, and procedures as well as indicators of attack in order to detect adversaries with persistent access to the enterprise.Understanding of defense-in-depth principles and general attack stages with respect to network security architecture Comprehension of MITRE ATT&CK Framework, Computer Network Defense policies, procedures, and regulations Study and identify malicious network and web application activities to determine weaknesses exploited, exploitation methods, effects on system and informationCompetent with SIEM tool (Splunk)

Operated as a technical Subject Matter Expert (SME) security penetration tester team lead and supervised a team of Independent Verification and Validation (IV&V) SMEs.Demonstrated expert-level knowledge in planning, development, coordination, implementation, and execution of the IV&V) program.Discovered over millions of vulnerabilities within the cloud and on-prem environments. Provides vulnerability assessment and guidance, false positive validation, attestation signing, compliance scanning and policy creation.

Mclean, Virginia, Us

Functioned as a technical Subject Matter Expert (SME) security penetration tester team lead and managed a team of IV&V SMEs.Demonstrated expert-level knowledge in planning, development, coordination, implementation, and execution of the Independent Verification and Validation (IV&V) program. Conducted compliance and vulnerability assessments on a broad range of systems, including mainframe, UNIX, Windows, networking, databases, virtual environments, applications, and Web servers.Used both manual and automated penetration testing methodologies to identify, assess, and report security risks, prioritize findings based on risk, and documented detailed corrective and remediation plans or actions.

Mclean, Virginia, Us

Received recognition and achievement Letter from organization's former OCIO for the large number of remediated vulnerabilities within the environment.Subject Matter Expert (SME) in application security, software engineering, secure source code development and cyber intelligence Initiated and improved agency’s Cyber Security risk posture at an enterprise levelDeveloped and lead Information Technology risk assessment and treatment program, including identification of risks and ensuring implementation of mitigating controls and mapping to authoritative sources and projects Originated without guidance Security Evaluation Assessments, analyzed Remediation Plans and manually assessing web applications single-handedly.

Developed, managed and maintained the Web Application Security Program within customer's infrastructure.Perform manual and automated Web application vulnerability assessments. Demonstrate manually, common web site security issues (XSS, XFS,CSRF, session fixation, SQL injection, information leakage, application logic etc.) across various platforms based on OWASP secure coding practices, Top Ten testing framework, FISMA, NIST, OWASC.

San Francisco, Ca, Us

Demonstrated extensive knowledge in Application Security, Web Application Security, penetration testing beyond the use of vulnerability scanners, manual application review.

Planned and Conducted technical, non-technical Information Assurance (IA) assessments/tests and evaluations of various vendor products, computer systems, software intensive/driven systems, wireless products, wireless systems, optical, networking/switching products following Department of Defense (DoD ) IA requirements.

Knowledge of Federal and DoD Information Assurance 8500 Series Regulations, DoD Instruction 5200.40, DoD IA Policies and Procedures. Responsible for the development and preparation of critical reports for the Certification and Accreditation (C&A) of FuelsManager application within the requirements of the DIACAP (Department of Defense Information Assurance Security Certification and Accreditation Process) and the BSME Suite.Conducted in-depth DIACAP Security Test and Evaluation (ST&E) reviews of the DoD 8500.2 IA Controls.

Extensive experience in all applications obtained to support the customer service efforts of all customers of business units. Troubleshooted all business unit customers’ issues with accessing the program applicationsDesigned and executed advanced queries in on related Platforms.Developed advanced knowledge and skills of hardware encountered in the assigned program.Generated detailed and understandable descriptions for Problem Trouble Report and System Change Requests.

Investigated and resolved issues involving over $15M of Also (Unliquidated Obligations). support effort to support financial staff pertaining to funds.Utilized auditing, supply chain and logistics management programs to perform periodic system audits offices.

Master Of Science (M.Sc.), Management Information Systems (Information Security)

Bachelor Of Science (B.Sc.), Business Information Systems (Information Security)

Business Technology Education Council National Diploma (Btec), Computer Studies