Michael Shipp Email & Phone Number

New York, New York, United States

Stamford, Ct, Us

New York, Ny, Us

New York, Ny, Us

New York, Ny, Us

Responsible for vulnerability management, endpoint, network, and application security. Perform traditional vulnerability management using Tenable SecurityCenter. Architected endpoint security solution for traditional physical assets and Citrix VDI environment. Responsible for configuration of network firewalls on-premise and Amazon AWS. Manage the application security program which evaluates security of in-house developed web and mobile applications. Perform penetratation tests against public assets and report of findings. Develop and execute red team engagements to test the thoroughness of defense-in-depth, and exercise incident response capabilities. Responsible for evalution of cloud configuration in AWS, Azure, and O365.

Mclean, Va, Us

Lancaster, Pennsylvania, Us

SecureStrux is a small, agile, customer focused company that provides specialized professional services and innovative solutions in the areas of Information Assurance and Compliance. SecureStrux has experience in successfully supporting defense, federal, and commercial clients. While the company's background provides a wide range of Information Technology services, we strategically focus on Cybersecurity consulting and solutions. In doing so, we believe that we can not only stay current on the continuous and ever-growing cyber threats, but also help our clients be proactive and stay one step ahead. SecureStrux is committed to the highest standards of quality, dependability, and service. We thrive on challenges and the opportunity to compliment our customers' mission, wherever they are located.

Mclean, Va, Us

Security consultant in support of an Information Assurance Assessment branch. Perform risk assessments according to standard scoring methodologies. Cyber Security accredited to be CCRI auditor for Host Based Security System (HBSS).Monitor, observe, and collect raw data in order to make remediation recommendations.Development of IT security metrics and reports.Implement, and improve upon grading methodology in order to score field offices during security assessments and measure residual risk.

Reston, Va, Us

Performed vulnerability assessments on Windows, Linux, UNIX, and Solaris systems utilizing DOD approved methods and tools such a Retina, Nessus, NMAP, and DISA Gold Disk/SRR. Assessed systems for known vulnerabilities as identified by JTF-GNO/CYBERCOM as well as zero-day vulnerabilities. Responsible for full life-cycle of vulnerability assessment, including system scanning, vulnerability identification and mitigation, reporting, and follow-up on affected systems. Ensured systems compliance with DOD Information Assurance Certification and Accreditation Process (DIACAP).

Washington, Dc, Us

Managed network security for a multimillion dollar tactical network. Responsible for performing weekly and monthly vulnerability assessments for a heterogeneous network which included Windows, HP-UNIX, Solaris, Red Hat Linux, and custom military systems. Utilized DOD and industry standard tools such as Retina, Nessus, NMAP, and DISA Gold Disk/SRR, as well as custom Navy applications. Provided monthly and quarterly reporting to senior command personnel on network readiness, overall security posture, and open vulnerabilities. Supervised the DIACAP certification and accreditation process, developed and maintained the Information Assurance policy identifying the architecture, requirements, objectives, and procedures. Oversaw all aspects of Information Security by conducting analysis, periodic testing, verification and accreditation of network attached systems. Managed privileged user access to network and combat systems. Reviewed and updated site network security requirement to ensure compliance with DOD requirements.