Monitor, detect, and respond to security incidents and threats using advanced tools and techniques.Conduct vulnerability assessments, penetration testing, and risk analysis to strengthen system defenses.Implement and manage security controls, firewalls, and encryption protocols to safeguard data and networks.Analyze security alerts and logs to identify and mitigate potential risks.Develop and enforce security policies, procedures, and best practices across the organization.Ensure compliance with industry standards, regulations, and organizational requirements (e.g., GDPR, ISO 27001, NIST).Investigate security breaches, perform root cause analysis, and recommend remediation actions.Collaborate with IT teams to design and implement secure infrastructure solutions.Conduct employee training on cybersecurity awareness and best practices.Prepare reports and documentation on security incidents, metrics, and system performance.

• Enforces NIST 800-53 compliance best practices across multiple networks• Follows steps 0-6 for RMF process to ensure compliance• Creates reports/presentations, and leads change management meetings• Creates and maintains POA&M for current effort• Develops mitigation strategies for risks identified in vulnerability scans• Performs annual security review• Configures and operates ACAS vulnerability scanning tool, among others• Subject matter expert for Windows and Linux servers and applications• Works with Exchange, Active Directory, Hyper-V• Works with Vsphere / Vcenter• Works with Cisco routers/switches – enterprise networking• Develops and implements security controls to meet security compliance with TSA/DHS• Assists with creation and implementation of security plans• Performs security audits for SAP networks• Manages HBSS system for McAfee deployments across multiple networks• Runs vulnerability scans through ACAS on multiple networks, and implements controls/solutions based on findings• Trains lower-level IT staff on HBSS/ACAS products• Performs system administration duties for multiple networks• Evaluates, assesses, and monitors networks and applications against latest cyber security standards (APLs, CommonCriteria, Security Technical Implementation Guides (STIG), Information Assurance Vulnerability Management(IAVM), etc.)

•Subject matter expert for Windows and Linux servers and applications•Works with Exchange, Active Directory, Hyper-V•Works with Cisco routers/switches – enterprise networking•Cyber Security Liaison for 83rd FWS/FWI•Information Assurance Officer for 83rd FWS/FWI•Performs ISSO duties to aid ISSM with pending ATO•Develops and implements security controls to meet ATO compliance•Assists with creation and submission of RMF packages through SIPR EMASS• Performs security audits for SAP networks•Manages HBSS system for McAfee deployments across multiple networks•Runs vulnerability scans through ACAS on multiple networks, and implements controls/solutions based on findings•Trains lower level IT staff on HBSS/ACAS products•Performs system administration duties for multiple SAP networks•Monitors and tracks ATO dates and milestones•Works with eMASS and VRAM to attain/maintain RMF artifacts•Evaluates, assesses, and monitors networks and applications against latest cyber security standards (APLs, Common Criteria, DADMS, Security Technical Implementation Guides (STIG), Information Assurance Vulnerability Management (IAVM), etc.)

-Administration of Command and Control systems-Management of HA clusters of servers running VMware Server.5.0 and VMware Server 6.0-Hardware included NetApp, Nutanix and Qnap Storage Arrays, Dell Servers, and Cisco Networking-Operating Systems included Microsoft Windows Server 2008R2, 2012, Red Hat 6.0.and Debian 6 & 7-Software included Active Directory, Exchange, Group Policy, DNS, Splunk, ACAS, HBSS-Network included Cisco IDS, switches, firewalls, Fortigate / SonicWall firewalls-Assist in technical writings including EEs and SCRs-Analyze and scan system for patch requirements via ACAS-Create and implement solutions to issues identified in vulnerability scans-Installation of new IA regulations, DOD STIG changes, DISA IAVA/IAVB updates, WSUS Security patches.-Validate functionality and fix loss of functionality after patching has been performed.-Monitors and tracks ATO dates and milestones-Works with eMASS and VRAM to attain/maintain RMF artifacts-Evaluates, assesses, and monitors networks and applications against latest cyber security standards (APLs, Common Criteria, DADMS, Security Technical Implementation Guides (STIG), Information Assurance Vulnerability Management (IAVM), etc.)

• Works on special project teams as needed to solve company logistical challenges• Helped create, train, and define scope of work for third party technical support team• Connects and communicates with clients remotely using remote software and/or telephone as needed• Diagnoses and repairs software/operating system problems•Removes Malware / PUPs•Performs software installations and upgrades•Performs remote network troubleshooting, setup, and configuration•Trains clients on various software applications•Recommends upgrades as applicable•Maintains high level of professionalism, courtesy, and client service throughout each interaction•Performed all of the above services on-site for our residential and business clients for the first 9 years of employment with the company, and then moved to our remote channel.•Assists with Business clients for network/server issues and configuration as required