Michael Burns Email & Phone Number

Mclean, Va, Us

Responsible for the information assurance program for classified systems and the unclassified corporate network.

Mclean, Va, Us

· Led Blue Team & IV&V task areas; performed risk analysis, remediation support, & evaluation of leadership cyber priorities--managed 5 personnel to complete 300+ planned/ad hoc missions per year· Spearheaded development of automating IV&V in Splunk; set flags for credential problems and high risk scores—greatly improves RMF workflow by identifying problems much earlier in complex enclave· Created initial solutions draft to tackle customer’s major flaws in business processes & network design· Collaborated w/ISSOs & SCAs to create high level process flow improvements for cybersecurity program· Oversaw development of RMF workflow tracker for 5 task areas; improved tracking and automated scheduling & weekly slide development for A&A meetings-saved 1600+ labor hours per year· Developed Blue Team strategy & implementation plan to investigate anomalous security events· Participate in hiring events on a regular basis to increase the firm’s talent & expertise within JCC Cyber· Developed a full scope cybersecurity overview diagram to support current/future business development· Job manager & career manager for 5 personnel; led most highly awarded team on contract of 85· Spearheaded documentation of accreditation boundaries of 280 systems for Splunk automation projectsMajor Accomplishments:Received Value award for work on Blue Team strategy and initial program build-out.Automated 2K+ hrs/yr of workflow management & RMF accreditation risk assessments for 280 systems.

Reston, Virginia, Us

Responsible for IA management & continuous monitoring (ConMon) of 9 DSS RMF systemsSenior Info Assurance Engineer for geographically separated SCI network over 4 contractor sitesConsolidated 4 ICD 503 networks in Xacta; developed policy & processes for new CWAN EnclaveSteered security reqs for classified AWS/C2S prototype comms project; received IATO from NROCollaborated w/IT & other shareholders in planning 100% rework of CWAN to create standard security baseline; ensured compliance through all phases of $500K IS consolidation projectCreated/implemented 300 pg company template for Defense Security Service (DSS) RMF sys; standardized & streamlined policy/procedures RMF - reduced workload by 60% for new IS’Led project w/ corporate security standardizing/creating compliant FSO RMF security controlsConsulted Peraton area site Cybersecurity Program through cross-site evals to find/fix issuesChaired IS Change Control Board (CCB); evaluated change requests and made recommendations to maintain the approved risk posture of 4 networks – drove project security requirementsWrote/implemented RMF policies for 5 Peraton sites containing access control plan, incident response plan, vulnerability management plan, configuration management, security control traceability matrix, continuous monitoring plan, & auditing guide; DSS issued ATOs for all sysHeaded team of 3 IS security personnel in managing of the security posture and daily upkeep of multiple types of DSS and DISN connected ISs; regularly briefed senior management on issuesLed 6 person team to prep SIPRNet for CCRI; created extensive document binders for all STIG required docsEvaluated DoD joint policy for compliance with executive orders regarding classification system guidance; recommended 8 pages of changes to joint policy & changes to 3 DoD applications

Randolph Afb, Tx, Us

Managed Cybersecurity Program for 70 ISR Wing; 17 subordinate units/5 IA direct reportsResponsible for maintaining DoD IS security baseline of 4 AF networks; ensured compliance with DoD guidance & AF Instructions; maintained ATO/ATC status & NIST 800-53 security controlsDeveloped/deployed comprehensive policy & procedures after 80% change in AF InstructionsRevamped ISSO/Comm training programs to meet new regulations & comply w/ DoD 8570Tracked DoD 8570 compliance across global Wing; ensured 530+ techs maintained certificationImplemented DoD/AF policy PII handling & incident reporting after numerous DoD changesOversaw installation Notice & Consent Program of 17 squadrons; reported activity to AF HQ/JAGSteered security requirements on 21 base IT projects as IA SME to maintain security postureLed IA Wing Inspection Teams during annual compliance reviews; reported results to CIO & CCsEvaluated requirements & developed risk management policy for Wing IT asset purchasesAnalyzed trends & ISSO feedback to continuously improve Wing IA policies & processes Oversaw vulnerability management & continuous monitoring of $4.1M base network; 1800+ sysCrafted complete rework of vulnerability management program to meet new CYBERCOM/AF requirements; created phased plan to implement process changes & address knowledge gapsDirected network hardening project to prep for CCRI; 1800+ systems tracked/validated/STIGedManaged network risk profile for AO w/ eMASS & Xacta; ensured accurate program risk info available for risk executives-Oversaw C&A/A&A activities under DIACAP & RMF FrameworksDrove re-write of Disaster Recovery Plan; analyzed mission requirements & consulted with functional leads to determine risk acceptance guidelines and recovery priorities post disasterPiloted creation of Incident Response Plan for Wing cyber operations; oversaw annual training & exercises to monitor program effectiveness; ensured compliance & stakeholders risk acceptance

Randolph Afb, Tx, Us

Maintained food service database, ensuring that pricing system remained accurate with order inputs and inventory outputs for items sold or wasted within 3 %; Reduced inaccuracies by 8%Ran outputs from ordering database into the inventory/point of sale database as needed to ensure accurate vendor payments, proper inventory accounting, and correct product pricingEnsured that system and physical access control processes were followed to prevent theft/fraudLead, mentored, & trained 6-person shift; increased productivity by fostering teamworkManaged food safety critical control points; ensuring physical security of base food supplySafeguarded $1.2M rations per year; reduced loss of inventory by 15% by increasing security

Randolph Afb, Tx, Us

Responsible for maintaining access control systems for Air Force Lodging facility to include electronic locks and central management information system; repair, replace, maintainEnsured security of guests & DVs by following strict Info Security program, reviewing security recordings as necessary, and maintaining outer door functionality to protect physical securityCreated and maintained maintenance database to ensure AF Lodging standards for maintenance and overall room standards were exceeded; coordinated room repairs into booking databaseParticipated in 2 ORIs performing lodging ops in simulated deployed environment with emphasis on physical security against active aggressors & ensuring location DB was functional/accuratePerformed IT phone system maintenance ensuring guests had continuous ability to make calls for comfort and actively ensured 911 and other emergency lines were accessible through testingAssigned to safety investigation board to determine cause for $1.2M aircraft incident; strict INFOSEC/confidentiality concepts applied; responsible for repairing audio files using IS tools & evaluating process compliance with regulations & federal lawExecuted Business Continuity Plans for Disaster Recovery during 2 plane crashes; supported 100’s of security forces, maintainers, and Wing leadership to secure highly classified aircraft

Atlanta, Georgia, Us

Was elected board treasurer and was a key member in reestablishing the Yokota Air Base chapter. This included managing budgets, projected expenses, making fundraising goals, navigating Air Force and IRS regulations for the management of non profits, and creating fun events for the children of military members stationed at the base.

Fort Knox, Kentucky, Us

Served as a cadet officer in the Army JROTC program on Yokota Air Base Japan. with the goal of leading young adults through the Army's educational and leadership program. I was also heavily involved with leading program compliance and assisted in creating many local processes and policies for logistics, rifle team activities, personnel programs, and overall compliance with Army regulations.

Bachelor Of Science (B.S.), Computer/Information Technology Administration And Management

A.S. Information Systems Management, Computer And Information Systems Security/Information Assurance