Aaron Munro Email & Phone Number

Stamford, Connecticut, Us

Vulnerability Management Analyst supporting the Application Security Program responsible for the identification, assessment, and risk based prioritization of both internal and external vulnerability findings across all Synchrony IT assets. - Recognized as technical remediation and data analytics subject matter expert (SME), expertise is leveraged to provide support and oversight for Vulnerability Management Team (VMT) process improvement efforts, the automation of data pipelines, and enhancements to program scanning/reporting/metrics coverage. - Engage with application/asset owners, technical support teams, and VM liaison stakeholders to support proactive assessment, remediation, and risk treatment of critical/high risk findings in compliance with VM Program standard defined remediation timeframes and risk thresholds. - Support tactical operations of the VMT to ensure SLA's for mission critical deliverables maintained as well as actively lead special initiatives to streamline upstream supporting processes and team member activities. - Primary POC task owner for quarterly external Approved Scanning Vendor (ASV) scanning/reporting for Payment Card Industry (PCI) compliance remediation engagement and findings attestation evidence collection/submission. - Primary POC task owner for the maintenance and optimization of data ETL pipelines and vulnerability scanner platform/tool/agent resources in use by the VMT. Duties involve development and implementation of report validation processes, health check monitoring dashboards, outage/incident technical support, and documentation/tracking of issues.

Washington, Dc, Us

Information System Security Officer (ISSO) for the Department of Homeland Security (DHS) Amazon Web Services (AWS) GovCloud environment, maintained relationship between infrastructure/application support teams and key system stakeholders, providing oversight and management of all Information System components with ensuring continued Security Authorization or Certification and Accreditation throughout the lifecycle of the Federal Information Security Management Act (FISMA) systems. - Ensured Information Systems were deployed, configured, and maintained in alignment with organizational policies, standards, and federal regulatory requirements. Documented regulatory evidence of adequate security controls and measures throughout the System Development Life Cycle (SDLC). - Responsible for coordinating infrastructure/application support team deployments for implementation of effective network, host, and application based security measures for all FISMA scoped systems deployed across data center and hybrid/private cloud environments. - Established process for routine policy compliance auditing against Information Systems for the collection of technical artifacts supporting documentation of control evidence in compliance with DoD security hardening standards and National Institute of Standards and Technology (NIST) regulatory requirements. - Developed and implemented custom scripted data solution for the automated identification of actionable insights, tracking of operational remediation efforts, and trending of overall security posture over time based from the aggregation and summarization of data from CMDB, Nessus, and AWS data sources.

Washington, Dc, Us

Security Configuration and Patching Management Lead responsible for coordinating the identification and remediation of vulnerabilities for over ~10,000 mission critical Data Center-1 (DC1) systems. Coordinated daily tactical operations of team to ensure systems met compliance, regulation, and company Service Level Agreements (SLA). - Responsible for coordinating and maintaining infrastructure patch management SLA’s for all data center and cloud systems and adhering to compliance with DHS ISVM remediation timeframes and NIST 800-53 guidelines. - Functioned as a technical liaison between infrastructure, application, and security leads for the coordination of technical team deployments to meet information security policy requirements. Established and maintained working relationships between with ISSO FISMA owners, System Owners (SO), and Information System Security Managers (ISSM). - Developed automated approaches for managing large data sets to aid in aggregation of cross-functional data for in-depth analysis of in-scope, work related functions by leveraging custom developed Python, PowerShell, and Power Queries solutions. - Optimized and automated manual human error prone administrative functions through the development of custom created PowerShell scripts. Maintained versioning and change controls within centralized code repository and knowledgebase procedural documentation library.

Washington, Dc, Us

Security Configuration and Patching Management Lead responsible for coordinating the identification and remediation of vulnerabilities for over ~10,000 mission critical Data Center-1 (DC1) systems. Coordinated daily tactical operations of team to ensure systems met compliance, regulation, and company Service Level Agreements (SLA). - Responsible for coordinating and maintaining infrastructure patch management SLA’s for all data center and cloud systems and adhering to compliance with DHS ISVM remediation timeframes and NIST 800-53 guidelines. - Functioned as a technical liaison between infrastructure, application, and security leads for the coordination of technical team deployments to meet information security policy requirements. Established and maintained working relationships between with ISSO FISMA owners, System Owners (SO), and Information System Security Managers (ISSM). - Developed automated approaches for managing large data sets to aid in aggregation of cross-functional data for in-depth analysis of in-scope, work related functions by leveraging custom developed Python, PowerShell, and Power Queries solutions. - Optimized and automated manual human error prone administrative functions through the development of custom created PowerShell scripts. Maintained versioning and change controls within centralized code repository and knowledgebase procedural documentation library.

Entrepreneur and small business owner leading the market entry and long term strategic development for Fence Improvement & Deck Overhaul, LLC. Oversee all aspects of the business including but not limited to: Customer Service, Human Resource, Safety Regulation Compliance, Quality Control, Procedural Documentation, Accounting, Marketing, Asset Life Cycle Management, and Business Performance Metrics.- Responsible for driving business engagement and customer interactions throughout all service offerings.- Automated an accounts management workflow ticketing system leveraging open source word processing and data analytics software.- Built out a knowledgebase library of policy and process documentation in support of business operations.- Implemented quarterly audits targeting operational performance and customer satisfaction for ongoing process improvement.

Senior Calibration Technician and lead technical resource, oversaw small cross-functional team of technical specialist supporting mission critical precision equipment across all local and remote business sites. - Primary point of contact and technical lead for on-call incident response and after-actions problem investigations overseeing entire process for business critical resources from emergency triage/assessment, troubleshooting/diagnostics, incident resolution, root cause analysis, identification of corrective actions, to post incident implementation. - Responsible for system baselining, configuration benchmarking, policy compliance auditing, data collection, and audit/regulatory evidence collection in line with industry standards and best practices. Maintained enterprise environment supporting high availability redundancy and adherence to configuration profiles in order to ensure optimal running conditions and minimum operational down time. - Serviced, repaired, calibrated, regulated, fine-tuned, and tested technical equipment in compliance with ISO Standards and business standard operating procedures.

Randolph Afb, Tx, Us

Active Duty Staff Sergeant serving as Senior Calibration Technician and Interim Shift Leader for the 96th Maintenance Flight, led shift operations managing 35 technical specialists in support of US Air Force Advanced Aircraft and Weapons Systems. - Functioned as primary technical resource and tactical lead of sectional team operating within a highly matrixed multi-site environment performing deployment, calibration, and diagnostic tuning of all mission critical infrastructure. - Responsible for maintaining technical SLA support will within contractual thresholds and the execution of operational run procedures in compliance with business technology policies and regulatory framework guidelines. - Recognized as technical SME, established a centralized knowledgebase of cross-functional training materials, personnel onboarding resources, and document library of process and procedural job aids. Built knowledgebase leveraging expertise and extensive working knowledge with the following instrumentation: Signal/Function Generators, Oscilloscopes, Spectrum Analyzers, Tactical Air Navigation Equipment, Communications Arrays, Frequency Counters, Precise Frequency, Digital/Analog Meters, Calibrators.

Military Technologies And Applied Sciences

Business Administration And Management, General

Business Administration And Management, General

Education record