Michael O'Donnell, D.D., Cissp Email & Phone Number

Alexandria, Va, Us

• Key personnel of the Cybersecurity Team whose contributions led to NSF winning the “Best in Posture” 2011 Cybersecurity Award and the "First Federal Agency to deploy the Continuous Diagnostics and Mitigation (CDM) security program" in 2016 by the DHS.

Vienna, Virginia, Us

Key member of the Cybersecurity Operations and Engineering Team with the responsibility of performing as a Cybersecurity Vulnerability Management Lead. I lead workstreams on engagements including but not limited to application security testing, infrastructure vulnerability scanning, reviewing and prioritizing results, and remediation and/or coordinating the remediation of assessment results. In addition, I conduct periodic and ad hoc vulnerability scans, analyze results, and recommend remediation as appropriate; I develop and conduct tests of systems to evaluate compliance with specification and requirements; monitor the Trusted Internet Connection (TIC) to ensure it is performing in accordance with its Service Level Agreement (SLA); review and assess risk posed by use of third-party applications on NSF systems and networks; perform ad-hoc tasks; enhance Security Center and Application Scanning; conduct database credentialed and compliance/audit vulnerability scanning; monitor, report, and coordinate/assist other tech teams to mitigate vulnerabilities by providing findings and ad-hoc support; support the security review of NSF systems and architecture as well as Cybersecurity & Privacy (CS&P) Policy development on IT service use, access, refresh, and configuration control, etc.; and mentor and guide junior and midlevel engineers in developing their skills. I explain highly technical information to nontechnical personnel so that this information can be best used in day-to-day business functionality. I Provide technical guidance, architecture, installation, configuration, and/or operation for solutions used across the entire lifecycle of vulnerability management including asset management, scanning/testing, threat intelligence, analysis, reporting, ticketing as well as the integration of these various solutions and technologies.

Arlington, Virginia, Us

As a Catholic Chaplain, I currently support the 213th Regiment “The First Defenders” and I previously supported several military units and organizations including the 228th SPT BTN, Lehigh Valley Military Affairs Council, NCOA.Again, I volunteer my time and service to these units and organizations and I receive no emolument from them.

I was consecrated Bishop and became third in line in Apostolic Succession to His Holiness, Pope Paul VI. I am now a humble shepherd of the people of God performing His work by teaching, governing, sanctifying and awaiting, as Saint Peter exhorts: "And when the chief Shepherd shall appear, you shall receive a crown of glory that fades not away" (1 Peter 5:4).All emolument received for my ministerial duties is donated back to the church for its operations.

Falls Church, Va, Us

Manage a team of three Cybersecurity Engineers in all aspects of the Cybersecurity Framework (NISTIR 8170) including continuous monitoring, reporting, and collaborating with various teams on the remediation of vulnerabilities. Manages a multitude of Cybersecurity tools to assist in proactive detection, compliance, reporting, and mitigation of risk.Work with the Federal Stakeholders to ensure that a risk based approach and framework is used which balances the operational and economic costs of the defensive measure against and commensurate with appropriate Cybersecurity controls in all aspects of mission capabilities—The outliers in this process are preventing data loss, improving network and system security, and ensuring an appropriate level of Cybersecurity awareness training. Focus on establishing mechanisms for improving Cybersecurity services and posture that meets or exceed regulatory requirements and industry best practices. Tasked with providing Subject Matter Expertise (SME), guidance, leadership, and support in order to develop strategies and executing these transformative initiatives that will fundamentally alter the way NSF's Cybersecurity and IT services are provided internally to its employees and other contractors as well as externally to its stakeholders and clients. Contribute to the broad overall Cybersecurity program by providing SME on the following:• Tenable Nessus and Security Center.• Core Security Impact and Core Vulnerability Management Insight.• CDM Suite of Cybersecurity Tools.• Infrastructure Asset Identification and Classification Management.• Risk Management Framework.• Vulnerability Assessment and Threat Identification and Exploitation.• NSF Cybersecurity policies & procedures.• Application Security.• Public Key Infrastructure.• Trusted Internet Connection.• Einstein 3A.• Review and recommendation of Cybersecurity policy and practices.• Identity Management.• Continuous Mitigation and Diagnostics (CDM).

In addition to serving at Our Lord's Ascension Parish as their Assisting Parish Priest, I also became the Assistant Pastor to St. Jude's Cathedral in 2008.Upon being invested to the rank and dignity of Monsignor on 29 May 2010, I relocated to the Washington, DC Metro and became the Vicar General and served The Most Rev. +Ignatius Alexander I, as a legate of his "Apostolica Legate a Latere" working at the National Chancery.

Reston, Va, Us

• Leading by example and leading by enabling people in achieving goals and creating avenues to more efficiently and profitably meet the expectations of the customer.• Entrepreneurial spirit with ability to drive program security projects independently.• Passionate about improving and enhancing current security environment in order to create a model of excellence.• Driven to provide excellence both for the internal team(s) as well as to the customer.• Desire to step outside the box and comfort zone in order to take ownership of projects and domains outside of scope of expertise.• Demonstrates an in-depth understanding of enterprise-wide applications within relevant functional areas. Sets expectations and determines appropriate measures to be used across the division / Foundation.• Independently manages, plans, facilitates, evaluates and advocates for solutions, plans, and functions and is responsible for the management of complex projects, programs, and initiatives with large scope across the entire Foundation.• Leads, enables and is accountable for the implementation and integration of solutions within the organization.• Understands the mechanism for securing new technologies and understands the impact of new and emerging technologies as well as the tools and methods for mitigating risk.• Contributes to the design and development of new and existing projects and can easily converse to a technical or non-technical audience for building consensus among the various stakeholders.• Extremely effective oral and written communicator that presents strategy, architecture, status information, and articulates solutions for the customer and other team members in both formal and informal review settings.

Armonk, New York, Ny, Us

Key personnel of the Security Team whose contributions led to NSF winning the “Best in Posture” 2011 Cybersecurity Award by the DHS.• Monitored, performed in-depth vulnerability and risk analysis through the use of various tools and provided detailed metrics and briefings to stakeholders using various tools including Tenable's Security Center, FireEye Malware Protection System, Bluecoat Web Filtering/Proxy, Fortinet, Cisco Ironport, Microsoft Antigen & Forefront, MacAfee ePO & NitroSecurity SIEM, nMap, Nessus, Snort, IBM AppScan, Core Impact/Insight Penetration software/appliance, Hyena, and AccessData FTK Enterprise.• Developed and articulated security strategies and action plans to successfully implement the Agency’s vision and goals.• Engaged with industry expert information security leaders on cutting edge efforts on security standards, policies and practices ensuring that our team is kept updated as well as ensuring best practices employed throughout the enterprise.• Advised senior management on information security risks and served as an expert advisor to the Federal Security Officer in the development, implementation, enhancement, and maintenance of information security systems and programs.• Worked with various internal and external teams to understand the overall threat to the Foundation, shared threat warning indicators and intelligence with various stakeholders.• Performed periodic risk assessment, security and business impact analysis leading to the development and evaluation of security and contingency plans for major business applications.• Created and developed compelling verbal and/or written communications to include Information Security Architecture requirements in an organized and persuasive manner, adopting style for different audiences and stakeholders.• Coordinated with US-CERT on declared incidents, assistants in the analysis of the data, and performed forensic analysis on compromised systems.

Minneapolis, Mn, Us

Capella is one of the select four-year colleges and graduate-level universities designated as a National Center of Academic Excellence in Information Assurance Education (CAEIAE) by the National Security Agency and the U.S. Department of Homeland Security.Courses taken in Masters Program:• TS5910 – Capstone for Information Assurance and Security• TS5140 – System Development Theory and Practice• TS5312 – Security Risk Management• TS5533 – Wireless Security• TS5010 – Introduction to Enterprise Application Architecture• TS5011 – Managing People and Technology• TS5160 – Business Foundations• TS5531 – Security Management Practices• TS5534 – Computer Forensics and Investigations• TS5536 – Ethical and Legal Considerations in Information Technology• TS5311 – Enterprise Security• TS5004 – Technical Communications

Mr. O'Donnell was the co-owner of a thriving Internet Webhosting company providing managed web servers, e-commerce and individual hosting accounts.In the capacity as the CISO, Mr. O'Donnell ensured Defense in Depth and layered protection of assets and Risk Assessment using the guidance of the National Institute of Standards and Technology Special Publications 800 series.

Upon ordination to the Holy Office of Presbyterate on 21 May 2005, I began serving this parish as the Assisting Catholic Priest. I performed all ministerial duties as required and concelebrated with the pastor every Sunday, Holy Days, and for funerals, baptisms, confirmations, etc.My ministerial duties are performed in parallel with my secular duties as any emolument for those duties was immediately donated back to the church for its operation.

Upon my ordination to the Holy Office of Diaconate on 31 May 2003, I conducted my Diaconate praxis at this parish under the mentorship of The Rev. Fr. Carmen Bolock, Pastor.

Paris, France, Fr

• Data Center manager for 10 geographically separated employees in all day-to-day operations of three geographically diverse international data centers with 400 Dell and HP 1U through 11U with over 100 blade servers as well as multiple clustered VM servers. • Responsible for data confidentiality, availability and integrity of HIPAA Protected Health Information as well other data to support the largest influenza manufacturer in the world. Data included cross business sectors, pharmaceutical, healthcare, e-commence and regulatory platforms. Managed audits from FDA, and audits related to PCI-DSS and SOX, as well as other topics. • Ensured the team met company policies and directives and the proper execution of over 78,000 jobs in a 24-hour period.• Ensured critical security patches were installed as required as well as ensured various controls were in place including preventive, detective, and corrective controls. Developed and conducted periodic testing of the DR/BCP & COOP Plan(s).

Hebron, Ky, Us

Data Center Manager

Provided security architecture, planning, and physical installation of equipment, ensuring connectivity with network resources, installing anti-virus, and other applications as required. Using the CIA model, ensured a Defense-in-Depth and layered security approach.

Managed 10 people executing day-to-day tasks related to IT confidentiality, integrity and availability. Managed human relations, accounting,and legal/contracts responsibilities for the company. Provided court testimony for evidence methodology and evidence tampering, includingchain-of custody and evidence preservation.• Responsible for all network, server, and computer operations/security including daily backups, VPN, Firewall, remote access, email, and AV issues. Maintained proprietary laboratory software as well as electronic cash register, credit card terminal, and bar code printer.• Handled all financial requirements including fiscal policy, budgets, projections, issuance of invoices/checks, financial books, audit preparation and vendor/customer financial matters, filed Sales & Use tax documents. Handled daily closing processes including counting cash, filling out all daily financial forms, transmitting agency reports, and closing out monthly, quarterly, and annual books.• Maintained all OSHA requirements including the Material Safety Data Sheets and briefed employees on proper use of hazardous materials as it applied to our laboratory.Ensured that the data being sent out was properly secured to properly preserve the chain of custody requirements. Mr. O'Donnell also maintained all computers and processes to ensure timely distribution of court required reports. Acted as a Subject Matter Expert in court when called upon.

Schaumburg, Il, Us

Taught classes in computer hardware, software, website development, and Windows Operating Systems.

Rutherford, Nj, Us

Taught a 4th year required advanced computer science course. Contents included data structures, protocols, networking, Open System Interconnection model, TCP/IP v4 and v6, and subnetting.

Technical instructor and responsible for infrastructure support. Developed the Certified Internet Webmaster and Network+ curriculums and taught the A+ certification curriculum. Courses included in-depth hardware/software, networking, and troubleshooting components.

Advised partners of a start-up SEC regulated financial services company regarding network and regulatory security policies and procedures. Designed, built and maintained a computer / networking system for offices in Texas as well as prepared budgets and financial reports.

Us

Managed over 100 remote field engineers for the entire Southern California region. Additionally, managed an internal team of 11 consisting of dispatchers and administrative personnel. Responsible for P&L’s on an $8 million dollar operation budget. Successfully renegotiated numerous Service Level Agreements. Proven track record of project-oriented project forecasting and proficient at managing simultaneous projects that improved overall quality, accountability, and efficiency within prescribed timeframes. Key member of the Disaster Preparedness Team.

Managed technical support of technology product sales. Included investigations of credit card fraud from purchase and worked with local law enforcement, the FBI and the Secret Service to investigate and resolve fraudulent matters. Managed 15 people.

CADAM (Computer-Augmented Design And Manufacturing) was a CAD software application originally developed by Lockheed to improve their design and manufacturing processes. The product was enhanced and extended over a 20 years period, to include modules that served several key industries, including Defense/Aersopace, Automotive/Transportation, Facilities Management/Plant Design, Heavy Equipment, Manufacturing and High Tech. IBM purchased the company after Lockheed divested themselves from all industries not specifically related to their core business strategy.Performed external help desk support for architects and engineers using the MicroCadam™ software. Performed technical testing and reseller and sales training.

Bethesda, Md, Us

Technical Support

Robins Afb, Ga, Us

Imagery Intelligence Analyst, Inspector General Team for AFSSO.

Robins Afb, Ga, Us

• Analyzed and processed photographic intelligence data from overhead reconnaissance satellite systems and U-2R, TR-1, SR-71, and other aircraft.• Analyzed other intelligence collection systems from HUMINT, COMINT, SIGINT, and from special classified sources and methods.• Performed Technical Surveillance Countermeasures as directed by DODI 5240.5.• Assisted the Special Security Officer on Special Projects within the purview of DODD 5220.22 - DOD Industrial Security Program.• Member of the Inspector General Team for Special Security Projects, TEMPEST, and EMSEC.• Intelligence Debriefing team member.• Special Access Team that designed and equipped the NASA Ames Dryden Center’s Sensitive Compartmented Information Facility (SCIF).

Randolph Afb, Tx, Us

Academic, Simulator, Flight Instructor & Examiner for the classified communications and data systems (Communications Systems Operator) crew position onboard the Airborne Warning and Control Systems (AWACS) aircraft.• Evaluated Air Force AWACS instructors for their breadth and depth of knowledge and their adherence to outlined training standards. Certified Air Force academic, simulator and flight instructor / examiner for AWACS classified data and Communications Systems Operator crew position.• Hand-picked youngest executive-in-charge of writing, editing, and publishing all technical manuals for the Royal Saudi Arabian Air Force AWACS program.• Restructured and streamlined all phases of AWACS training for over 200 students using Criteria Reference Instruction / Instructional Module Development concepts thereby reducing training time by 1.5 months and saved an estimated $25,000,00 per student per year.• Rewrote both the instructor’s syllabi and academic performance examinations saving approximately 45-man hours per year.• Point of contact for all SCI or Special Access Programs. Responsible for all COMSEC materials for various special projects and special access including the JSOC.Some of my various permanent and TDY assignments (encompassed entire AF career) included but are not limited to:- Pentagon, Washington, D.C.- Ramstein AB, GE- Tinker AFB, OK- Riyadh, Saudi Arabia- Ras Banas AB, Egypt- Thumrait AB, Oman- Naval Air Station Keflavik Iceland- Thule AB, Greenland- Kadena AB, Okinawa- Anderson AB, Guam- Hickam AFB, HI- Pine Gap (Alice Springs), Australia- U.S. Naval Support Activity, Bahrain- U.S. Naval Support Activity, Diego Garcia- Los Angeles AFB, CA- Beale AFB, CA- Nellis AFB, NV- Site R, (Raven Rock Mountain Complex), Ft. Richie, MD- Ft. Meade, MD- Bolling AFB, DC- RAF Menwith Hill, UK- RAF Lakenheath, UK- RAF Mildenhall, UK- Holloman AFB, NM- Elmendorff AFB, AK- Eielson AFB, AK- Goose Bay, Canada

Randolph Afb, Tx, Us

• Performed classified duties supporting the National Security Directives and Operations at the Pentagon and elsewhere.• Analyzed other intelligence collection systems from HUMINT, COMINT, SIGINT, and from special classified sources and methods and compiled intelligence reports from all-source raw intelligence data for various Joint Chiefs and Air Staff General Officers while monitoring global indication, threat and warning conditions. Alerted the Chief of Staff of Air Force, Secretary of Defense, and various Joint Staff personnel of pending imminent or most recent activities. Reported critical information from overhead reconnaissance aerial missions.• Assisted the Air Force Special Security Officer (AFSSO) on Special Projects within the purview of DODD 5220.22 – DOD Industrial Security Program covering the scope of the Personnel Security Program.• Worked in a Sensitive Compartmented Information Facility (SCIF) and performed Command, Control, Communications, Computer, Intelligence, Surveillance, and Reconnaissance Analyst duties (C4ISR). • Responsible for proper data classification and downgrading schedules.• Functioned as an Official Government Classified Courier within the Washington, DC metropolitan area.• Performed Watch Officer duties for the CSAF CAF War Room Command Center.

Randolph Afb, Tx, Us

Performed COMSEC, Crypto, SCIF, Communications and Computer Systems Operations duties and Crypt-Analysis duties.

Scholarship Winner, Regional Computer Forensics Training Workshop

Doctor Of Philosophy (Ph.D.), Information Assurance And Security

Doctor Of Divinity, Pastoral Care

M.S. It, Information Assurance And Security

Sacrae Theologiae Licentiatus (S.T.L.), Sacred Theology Master'S Degree

B.S., Pre-Law / Paralegal Studies

Clinical Pastoral Counseling/Patient Counseling

Doctor Of Philosophy - Phd, Homiletics And Liturgics

Doctor Of Theology (Th.D.), Systematic Theology

Doctor Of Ministry (D.Min.), Spiritual Formation And Church Leadership