Melissa Reece Email and Phone Number

Maintain current knowledge of Cybersecurity industry best practices and recommend system changes as necessary to keep the IMCOM IT infrastructure current.Install, configure, and maintain computer and network security software, including instances of the Assured Compliance Assessment Solution (ACAS), the Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) Viewer, and other cyber security software test and scanning software applications.Work independently with minimal directionReviews threat and vulnerability assessments to analyze the risk to information technology and networks and determines appropriate measures to effectively manage those risks.Conduct vulnerability assessments on assets and review results to verify targeted assets (e.g., servers, workstations, network appliances,) conform to security requirements.Serve as a subject matter expert, participating in meetings, working groups, system demonstrations, and conferences as needed.Experience with DoD Cybersecurity compliance and certification processes and building, modifying, RMF packages and artifacts for IA and Cyber certification and compliance throughout the acquisition life cycle.Ability to review and generate security artifacts, including security plans, POA&M, and security concept of operations.Experience Preparing, and implement accreditation and certification requirements which may include APMS, FISMA, Continuity of Operations Plan (COOP), and other required documents.Experience Assisting ISOs with system registration, Federal Information System Management Act (FISMA) data call requirements, updates in the Army Portfolio Management Solution (APMS), development of RMF documentation, coordination with DA Certifying Authority, coordination with Designated Approval Authority, and obtaining the Authority to Operate (ATO).Experience reviewing threat and vulnerability assessments.

Knowledge and experience working with federal compliance and guidance, including FISMA, RMF, Federal Enterprise Architecture Framework, DoDAF, NIST Cybersecurity Framework, NIST 800 seriesSupport and assist in policy and procedure creation, updates, and modifications, conducting IA analysis, security assessments, developing strategic implementation of risk management framework, supporting certification and accreditation processes, and documentation