Matt Currie Email & Phone Number

United States

Boston, Ma, Us

• Perform risk assessments/ gap analysis for clients based on their compliance obligations• Provide accurate analysis and environment scoping guidance to clients to ensure proposed solutions are aligned with compliance controls in the most efficient manner• Develop and maintain SSP, SOP, and POAM documentation for in-scope environments• Remediate POAM deficiencies by developing necessary policies, processes and procedures• Assist with client audits and assessments by providing timely, accurate documentation and evidence to third party auditors• Provide expert guidance with STIG, NIST,DFARS, FEDRAMP,CMMC and other control sets.

Swindon, Wiltshire, Gb

• Provision of a wide array of technical information security related services in the realms of:PCI client engagements, including but not limited to; performing scoping and gap assessments, providing technical advisory/remediation consulting, compliance maintenance program management, performing QSA-assisted SAQ reviews.• Provide support and guidance on Pre-Onsite engagements with customers.• Collected and classified initial pre-scoping documents.• Managed general communications with clients.

Closely worked with infrastructure architecture/engineering/operations, compliance, privacy, business teams and other areas necessary to identify risks to the business and drive solutions ranging from education and awareness to the adoption of new/existing policies, standards, processes, controls and technologies. Analyzed documentation necessary to perform control assessments and conducted necessary interviews in order to collect and review relevant materials necessary to produce results of the assessment. Perform follow up activities related to exceptions, risk acceptance, corrective action plans and additional mitigation activities.• Created and implemented a DISA STIG program to improve and maintain compliance of a 3 billion dollar DOD contact.• SOC2 experience along with control frameworks expertise in HITRUST, NIST SP 800-53,DISA STIGS PCI DSS, CIS Critical Security Controls, and ISO 27001/2700.• Conducted Information Risk Assessments as assigned to the team. Request and analyze documentation necessary to perform appropriate assessment and conduct necessary interviews in order to collect and review relevant materials necessary to produce results of the assessment.• Clearly and concisely documented and communicated risk assessment results with requestor, security architects and management, as appropriate.• Conducted and formulated appropriate risk scoring, as it relates to threat, vulnerability, likelihood, impact, security controls/counter-measures, etc.• Performed and followed up on activities related to exceptions, risk acceptance, corrective action plans and additional mitigation activities.• Communicated risk treatment methodology; risk avoidance, risk acceptance, risk transference and risk mitigation to appropriate groups.

United Business Technologies (UBT), Warren MI July 2015-PresentNetwork Security Auditor CIO G6 TACOMProvide recommendations to government system owners on how to comply with DoD 8500 series, NIST 800 special publications, and the Committee on National Security Systems Cyber Security issuance in accordance with the government RMF accreditation process to include a review of completed accreditation documentation to verify that it meets DoD and DA standards.• Responsible for obtaining and maintaining Authority to Operate (ATO)s and Independent Validation & Verification.• Facilitate understanding of Application Security Directive Security Implementation Guidelines (Vulnerabilities) and provide recommendations associated with remediation strategies to the IPT leads. Deploy STIGs and validating compliance.• Responsible for leading the documentation requirements associated with RMF accreditation and ensuring accreditation compliance.• Provide government oversight with weekly summaries of documented activities associated with RMF progress and pursuit of Authority to Operate Plan of Action and Milestones (POA&M).

Detroit, Mi, Us

Responsible for identifying potential security threats, responding to and remediating security incidents.Assists with incident response, researching events of interest, and providing analysis of firewall, IDS, anti-virus and other network sensor produced events. Utilizing Juniper SRX, Fortinet, Qradar ,Blue Coat, firemon,and Junos Pulse.Provides incident management support of security solutions at 150 networked locations across southeastern Michigan:Internet Content Filtering.Firewall Protection.Internet Anti-virus Protection.Digital Certificates administration & maintenance.Performs analysis of security related problems such as; blocked traffic due to firewall rules & policies.Participates in configuration & deployment of security infrastructure components involved in project solutions, and provide documentation for support & maintenance

Provide Tier 2 and Tier 3 support to the 20,000 staff at a military research facility with responsibility for the troubleshooting and support of network infrastructure, operating systems, and computer hardware and software. Manage escalations pertaining to the troubleshooting of installations, web access, and user issues.

Direct responsibility for the troubleshooting, installation, configuration, administration, and maintenance of network architecture and infrastructure, and hardware and software interface and interoperability for a U.S. Customs and Border Patrol collaboration network. Performed systems backup functions for a VMware virtualized environment to ensure information systems reliability and security and the implementation of related policies and procedures.

Managed global Tier 2 and Tier 3 LAN/WAN network and systems engineering support across 2 networks interconnecting 270+ worldwide locations under contract to the DoD. Integral member of a 25-member field operations team responsible for all aspects of network installation, application deployment, systems administration, and network support to U.S. Embassies and personnel worldwide. Utilized SMS, Remote Desktop, and NetOp applications to remotely troubleshoot desktop systems within the parameters of a DoD secure environment and within adverse conditions and environments.Installed Local Area Networks (LAN) following DoD Intelligence Information Systems (DoDIIS) standards.Maintained full responsibility for the evaluation, integration, configuration, installation, troubleshooting, testing, performance tuning, and maintenance of Windows 2000/2003/2008 (Active Directory/DNS/file server) and Windows XP operating systems.Performed and managed the installation, testing and troubleshooting of all cable infrastructure consisting of Fiber-Optic, CAT5, and patch panels.

Served as technical consultant to U.S. Cyber Command Operations on technical projects and network related operations related to the government’s unclassified (NIPERNet) network and to Retina Scan and IAVA patch planning and implementation. Provided virus protection and IAVA patching information for the NIPERNet hardening project, documenting network and software specifications and processes for all commands of the DoD Managed the successful installation, configuration, and troubleshooting of Symantec Anti-Virus servers and clients across 3 interconnecting worldwide DoD networks. Spearheaded a server rebuild project to optimize anti-virus performance.

Technical consultant and network administrator responsible for the architectural design, integrity, support, maintenance, and operability of a complex network connecting 270+ locations under contract to the DoD. Provided Tier 2 and Tier 3 LAN/WAN network, systems engineering, and project support across 3 networks that included installation guidance and backend network configurations for VoIP phone systems.Participated in and contributed subject matter expertise in systems architectural design and engineering evaluation and planning for worldwide network requirements gathering, proposal development, and solutions recommendations.Maintained full responsibility for encryption and server performance and for the provision of a full range of technical support to field technicians located at DoD installations worldwide.

Installed, configured, and maintained computer systems throughout the Naval Reserve network, providing high levels of hardware and software troubleshooting and user desktop support within a Windows 2000 based network. Deployed PCs and handheld devices within a networked environment and performed multiple system software upgrades and deployments while on special assignment to the Chief of Naval Operations in Europe.