Malcolm W. Email & Phone Number

United States

• Works closely with Program Engineering and Information Technology teams on cutting edge technology by evaluating and applying relevant concepts to deliver usable products for the U.S. Government• Leads the development and deployment of program information security for assigned systems to meet the program and enterprise requirements, policies, standards, guidelines, and procedures.• Manages Risk Management Framework (RMF) processes, product development and product maintenance for assigned systems.• Manages and performs security compliance continuous monitoring.• Leads and participates in security assessments and audits.• Prepares, reviews, and presents technical reports and briefings.• Identifies root causes, prioritizes threats and recommends/ implements corrective action.• Provides advisory to Program Managers through mentoring and technical leadership to the information security program team.• Explores the enterprise and industry for the evolving state of industry knowledge and methods regarding information security best practices.• Develops enterprise-wide information security policies, standards, guidelines, and procedures that may reach across multiple stakeholder organizations.

Dahlgren, Virginia, United States

Support the management and procurement of safety and mission critical products and systems, to include compliance with the prevention of purchasing counterfeit electronic parts and materials.• Work with key stakeholders to implement the Acquisition System Protection program to include their system's cyber resiliency.• Identification and protection of mission critical functions to achieve Trusted Systems and Networks (TSN).• Provide input to, help develop, and maintain the Program Protection Implementation Plan (PPIP).• Consult and provide input for task specific documentation such as the Cybersecurity Strategy, and Program Protection Plan.• Ensure compliance with DoDI 8500.01 and the NSA Guide for addressing malicious code with all software developments teams.• Work with various programs to ensure all project requirements are met by all policies for approval.

United States

Worked with Engineers and System Administrators to document system architecture and data flow diagrams in accordance with security procedures.• Worked closely with Federal customers to develop and update security-related documentation to reflect the security posture of the IT system, as directed by the government and federal program managers.• Prepared and assisted in the preparation of security documentation and reports as required to support customer engagements.• Managed and maintained system authorization status or Authority to Operate (ATO).• Performed Certification and Accreditation (C&A) to existing and new systems.• Responsible for oversight and coordination of C&A activities of each system.• Generated Security Artifacts templates for C&A artifacts requirement.• Reviewed and recommended approval on systems FIPS 199 and E-Authentication.• Prepared and provided DHS formatted System Security Plan. Prepared System Owner and Information System Security Officer letters.• Coordinated Security Test and Evaluation events between stakeholders.• Participated in Security Test and Evaluation process and Review ST&E reports.• Performed Vulnerability Assessment review and generated reports for System Owner and stakeholders.• Supported ISSOs in their responsibilities for systems including Enterprise security support and risk management and system weakness management (POA&M maintenance for the Risk Management Framework Portal (RMFP)).

Arlington,Va

• As a member of JSP SCA-R team, provided assess and authorization support to various JSP systems. Provides A&A support through the entire Risk Management Framework lifecycle (1 through 6). Initiates Kick Off meetings, create Project Management Plan (PMP) to help facilitate, guide and monitor the Information System Owner (ISO) through the RMF process. Coordinates with the Information Security System Officer (ISSO) to capture necessary artifacts that will be used to address RMF controls within eMASS. Addresses RMF controls, with corresponding CCIs, to validate systems against NIST.SP.800-53r4, NIST.SP.800-53a and DoDI 8500.01, 8510.01 governing policies.• Supported client Security policies and activities for networks, systems and applications including Vulnerability Management, Incident Reporting, Mitigation, and Continuous Monitoring • Worked closely with the branch Security Controls Assessor and team leads to ensure compliance with information system continuous monitoring reporting requirements • Participated in stakeholder meetings for system categorization of information systems using and NIST SP and DoD guidance.• Conducted compliance reviews of the security authorization packages prepared by other organizations and provide a report to the office of the Chief Information Officer (CIO) • Conducted compliance reviews of the security authorization packages prepared by other organizations and provide a report to the office of the Chief Information Officer (CIO) • Reviewed and aligned organizational and system processes with NIST 800-53, rev4 requirements; so that assessments can be done against the actual requirements and not ambiguous statements• Conducted Audits to ensure STIGs were properly validated and in compliance with DOD system standards

Indian Head,Md

• Support LANs, WANs, network segments, Internet, and intranet systems. Complete Scans of machines (ACAS, Nessus, and Security Center) Maintain system efficiency. Ensure design of system allows all components to work properly together. Troubleshoot problems reported by users. • Make recommendations for future upgrades. Maintain network and system security. Analyze and isolate issues. Monitor networks to ensure security and availability to specific users. Evaluate and modify system's performance. • Identify user needs. Maintain integrity of the network, server deployment, and security. Ensure network connectivity throughout a company's LAN/WAN infrastructure is on par with technical considerations. Design and deploy networks. Perform network address assignment. Assign routing protocols and routing table configuration. Assign configuration of authentication and authorization of directory services. Maintain network facilities in individual machines, such as drivers and settings of personal computers as well as printers. Maintain network servers such as file servers, VPN gateways, intrusion detection systems. Administer servers, desktop computers, printers, routers, switches, firewalls, phones, personal digital assistants, smartphones, software deployment, security updates and patches.

Washington D.C. Metro Area

Performed periodic network and workstation risk assessments for current and potential vulnerabilities and attack vectors, to build baselines, clarify the risks and engineer necessary changes to proactively eliminate incidents from becoming recurring events, then when needed provide risk mitigations. ● Maintained a continuous monitoring approach on affiliated networks and system security controls including system audit logs, ACL's, vulnerability scanning and A/V scans, updated software/hardware inventory, OS and software patching, Encryption standards. ● Being a focal point for handling various IT security incidents, disaster response and recovery for critical information systems nationwide. ● Lead over 100 audits of Information systems, networks (physical, VM and cloud) to ensure compliance with FISMA, FedRAMP, NIST, PII, NISPOM, DIACAP, ICD 503, ISO and other IT compliance frameworks. ● Subject matter expert in creating and analyzing security documentation such as System Security Plans, Vulnerability Scans, Risk Assessment Plans/Reports, Visio diagrams, SOP's, Body of evidence, ATO's, POAM's, and other supporting IT documents to help make critical business decisions. ● Facilitated all phases of certification & accreditation for various software, systems and networks using an IT Risk Management Framework, security tools/software and planning with all the stakeholders involved. ● Ensuring secure data migrations from different sources without losing integrity of data and keeping the data for the stakeholders. ● Trained employees and customers on Risk Management and testing Security controls in enterprise environments.• Participate in all aspects of Risk Management Framework (RMF) Assessment and Authorization up to and including securing Authorization to Operate (ATO) and ongoing continuous monitoring efforts.

Greenbelt,Md

• Database Administration intense training courses (640 class hours) Installation and configuration of Oracle 10g/11g servers and creation of databases in UNIX, Linux and windows environments. Perform day-to-day activities: Such as, daily error checks and database health monitoring of physical resources (disk space, memory, CPU, etc.). • Performance parameters adjusted as needed. Perform data pump export/import, traditional exports/Imports (cold and hot database backups). Create users, and assigning users the appropriate roles as defined by application requirements Conduct database performance tuning to ensure acceptable level of performance • Provide 24x7 on-call production database support Perform backups using RMAN for complete and valid restore and recovery purposes. Monitor and prevent the database from poor performance by proactively managing the Automatic Workload Repository (AWR) and using the Automatic Database Diagnostic Monitor (ADDM). • Proactively monitor the disk usage and the memory usage of the server, and monitored table-spaces for performance measures. Maintain database configurations in compliance with release management and change management

Lorton,Va

• Perform first call resolution and miscellaneous tasks as defined • Validate incoming service and change requests and establishes call/problem tickets within the tracking tool for resolution and resource allocation • Resolves, updates, and provides guidelines and status on tickets relating to production, products, hardware and software, Windows OS, office automation applications, network management and server systems management Accountable for the timely and accurate input, resolution and status of services request to customers of the Enterprise Service Desk (ESD) and must ensure complete customer satisfaction• Troubleshooting profile issues Configurations in MS Outlook and MS Office Suite Provide folder access, mapping printers, providing shared drive access, etc.

Bethesda, Maryland

-Game plan and configure various concepts in order to establish the most productive and efficient way to exploit opponents. -Teach athletes multiple techniques that will allow them to learn and excel in the Game of football. -Mentor athletes who need a great person to look up to and help guide them down the right path. -Help young men understand how the game of football will teach them important lessons about life (i.e., time management skills, prioritize responsibilities, and accountability)

State College, Pennsylvania

4 year Varsity Lettermen at Safety (2010-2014)Played under Hall of Fame legend Joe Paterno from 2009-2011• Penn State Pen-pal (wrote weekly letters to local children to help them learn and understand core values and the importance of school)• Lift-for-Life (2009-2014) Helped raise more than $825,000 toward research for rare diseases such as kidney cancer• Volunteer at Veterans Hospital for wounded and disabled war veterans• Robert B. Mitinger Jr. Memorial Award winner (2014,Presented to a senior who best exemplified courage, character, and social responsibility) Starting Free Safety from 2010-2013 2010 First-Team All B1G Freshman Team, Team Captain in 2012 and 2013

State College Area, Pennsylvania

THON is the largest student-run philanthropy in the world! The Penn State IFC/Panhellenic Dance Marathon, affectionately known as THON, is a yearlong effort to raise funds and awareness for the fight against pediatric cancer. Since 1977, THON has raised more than $114 million for the Four Diamonds Fund at Penn State Hershey Children's Hospital.

State College, Pennsylvania

One on One Fitness Consultants Spent 40 hours a week learning how and training various clients• Created workouts according to specific needs of clients• Observed how to correctly assist and train clients• Learned valuable life lessons about business and how to deal with different types of peopleParticipated in Y.A.R.T (Youth Athletic Readiness Training)• Helped create workouts and training regimines for local youth athletes who were looking for an added advantage when it came to their High School sportAlso participated in youth football camp at Assembly of God• Helped One on One put together and perform warm-up activities for the camp goers ages 5-12

State College, Pennsylvania And Bellefonte,Pa

State College,PA• Planned events for children from grade K-5Developing activities for active older adults Bellefonte, PA• Planned out and successfully executed a one of a kind beach boardwalk themed event night for local familiesApril 2012

State College, Pennsylvania

• Helped in the organization for the welcoming parade for all participants• Participated in the unified track program

Education record

Recreation, Parks, And Tourism Management, Commercial Recreation

Activities and Societies: Penn State Football Team, Uplifting Athletes, THONGroup Dynamics; Event Planning; Advertising; Service Marketing