Endpoint Security Engineer on the DHS Continuous Diagnostics and Mitigation (CDM) contract. Assist in the deployment and integration of new endpoint security tools. Provide additional support for endpoint security tools. Tenable Subject Matter Expert (SME). - Lead engineer responsible to testing and presenting new Tenable releases and updates to the CDM Change Control Board (CCB). Assists in the process of generating and approving all agency notifications once testing is complete. - Assisted in creating Vulnerability and Compliance Documentation for Agencies, including but not limited to: Vulnerability Scanning and Remediation Guidance, Nessus Agent Deployment Guides, Cross Platform Vulnerability Detection Analysis and Tenable Platform Update and Health Check procedures.

Conducted vulnerability research and analysis to best identify threats against NIH while coordinating notification and response across the enterprise. Assists with Cross Team Incident Investigations across NIH OPDIVs. Acted as an escalation point for Tier 1 issues as well as provided training for junior team members. Performed enterprise risk analysis, prioritization and remediation guidance.-Lead effort to ingest Nessus Network Monitor (NNM, formerly PVS) into Splunk for visability, monitoring and alerting across certain NIH critical and border systems.-Assisted in the establishment of Vulnerability Research Process for proactively identifying and responding to new threats as they pertain to the NIH Mission.

Responsible for analyzing application, host and network vulnerability data from a variety of sources and providing assistance on remediation at an application, host and enterprise level across the NIH Enterprise. Collaborate with other members of the NIH InfoSec Program, the NIH Information Security Community and peers at Health and Human Services (HHS) as well as other HHS Operating Divisions (OPDIVs) to improve the NIH risk posture. -Lead Engineer for Tenable deployment, including Security Center, Nessus scanners and agents for support of Continuous Diagnostic and Mitigation (CDM) Federal requirements across all NIH Institutes and Centers (IC's).-Coordinated cross team collaboration to restore visibility into major IC's Tenable instance, allowing daily insight into previously unknown network vulnerability data.Spearheaded re-architecture of Nessus agent deployment across NIH, resulting in greater visibility, risk assessment and vulnerability mitigation.-Performed Vulnerability research and reporting, keeping federal leadership aware of new threats and allowing same day response to critical alerts and findings.

Part of the engineering team that supports Tenable.io, SecurityCenter, Nessus, Passive Vulnerability Scanner, Log Correlation Engine, and hardware/virtual appliances. Assessed vulnerability false positives/negatives by interpreting and testing .NASL code. Experience creating/managing/administrating virtual Windows and Linux machines in order to replicate and test issues. Analyzed application debugs, PCAPs and HAR files. Investigated vulnerability and compliance scan results to include malware scans, DISA STIG, SCAP and CIS audits. Verified and submitted bug reports and worked as liaison between the end user and development to both report and resolve bugs and submit feature requests. Worked with Nessus and SecurityCenter API scripts to automate scanning and reporting tasks. Assisted in the setup and troubleshooting of web application scanning. Performed integration and troubleshooting of Nessus in the AWS environment. • Maintained issue resolution in the top 5% of the team (by quarter) by keeping a strong customer focus and prioritizing multiple tasks and projects in a dynamic environment. Maintained a high customer satisfaction score while resolving an average of 10-15 issues/day. Assisted customers with best practices for vulnerability scanning, product configuration and plugin debugging.• Indirectly supported Department of Defense users by responding to cases unresolvable by the Assured Compliance Assessment Solution (ACAS) support contractor, providing documentation, guidance and troubleshooting when network access was restricted.

Provided Tier 1 and 2 tech support to Authorized Support Customers on Palo Alto Networks enterprise-level firewalls. Served as a primary liaison for Managed Security customer incidents. Explain and demonstrate how to use Enterprise Security products to both technical and non-technical personnel. Maintain system health and provide basic troubleshooting for Splunk, QRadar, LogRhythm, McAfee and Arcsight SIEM environments. Track internal and external tickets from initial assignment to resolution for all SIEM platform teams. Assistance in the design, creation, organization and implementation of standard operation procedures (SOPs) to be used in issue resolution and prevention. Worked with both Engineering and Threat Analysis to insure issue resolution in a timely manner. Developed basic working Linux knowledge.• Appointed third shift lead after 90 days, multi-tasking and managing multiple priorities in a fast-paced, high level environment. Resolved complex issues with little guidance or oversite. Successfully worked with multiple teams to resolve Severity 1 and 2 issues after hours and used outstanding written and verbal skills to insure smooth shift transitions.• Worked closely with the McAfee SIEM team to create a daily, weekly and quarterly health check process to insure the Integrity, Confidentiality and Availably of the clients network and meet or exceed all pre-set customer SLA requirements. • Worked closely with Palo Alto Engineers to resolve such issues as Global Protect VPN configuration and troubleshooting, HA configuration,routing, VLAN and U-Turn NAT setups, App-ID, load balancing, Policy Control, SSL certificate and decryption issues. Performed PCAP analysis and CLI configuration and troubleshooting.• Successfully provided documentation and guidance, both via phone and email, to walk customers through the troubleshooting and resolution of issues when access to their network was restricted for security reasons.

Performed onsite and remote support to both SMBs and non-profit organizations. Provided administration and troubleshooting in Windows Server 2008 – 2012R2 Active Directory and Exchange 2003-2008 environments. Configured and deployed Dell SonicWALL firewalls and network solutions. After hours phone support for government clients including creation and dispatch of trouble tickets to on-call field techs. Conducted research on software solutions and created presentations to middle management. • Appointed senior technician on T&M contract with property management firm to provide installation and set-up of onsite computers and networks at sites in the Greater Baltimore- Washington area. Interfaced with security and A/V vendors and integrated their hardware and software into the network solution. Maintained daily contact with the clients Senior Site Support IT Specialist and the Senior Manager of Information Systems on an as required basis to discuss technical and scheduling issues. Worked very closely with clients internal remote helpdesk staff while onsite to both increase response and issue resolution time. • Within 90 days, increased the Scope of Contract by 150% while still maintaining a same day turn around on 99% of trouble tickets. Increased the number of tickets resolved same day by 33%, resolving an average of 15-20 tickets a week. Trained other SCD techs on client procedures, including the configuration and troubleshooting of client proprietary software, as well as improving in-place client SOPs. Increased scope of work to include solo travel to out of state locations to perform new site setups and hardware installs.

Provided Tier 1 and 2 tech support to residential workgroup and small business domain networks. Created documentation for in-store and on-site diagnostic procedures. Ran service calls; Assisted with technical pre-sales and pre-installation site surveys to design solutions and prepare bids for new business.• Assigned the role of primary technician on contract for support robotic pharmacy robotic systems. Serviced machines in various private/government/military hospitals and pharmacies. Coordinated with both onsite staff and vendor via phone to troubleshoot and resolve issues and order parts if needed. Only road technician to perform this role, leading to a 50% increase in the volume of work with a 99% customer satisfaction rate. • Contracted out to perform an office upgrade and data/account migration of three departments from windows XP to Windows 7 over a two-week period. Updated remote connection procedures for client site and assisted internal IT staff to create documentation for this transition to be used at other locations. Trained users on the use of Windows 7 Professional and Office 2010 Standard.

Provided direct technical support by phone and on site to home and business users. Repaired and maintained software and hardware on laptops and desktops, including virus removal, data recovery, patch management, system imaging and configuration. Ran sales floor and assisted customers with all manner of hardware and software purchases. • Redesigned and implemented company malware removal procedures, resulting in a 24 hour turnaround time on 99% of the equipment worked on with only a 1% return rate.• Assigned to take over all return merchandise authorizations (RMAs) for the company. Resolved issue concerning backlog of parts and increased RMA creation and response time by 70%, saving the company $5000 a year on average in parts.