My primary responsibilities in this role include:• Supports the system/application authorization and accreditation (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities commensurate with DoD and Air Force policies.• Provides expertise for the configuration and artifact creation of Platform Information Technology (PIT) systems in accordance with applicable guidance for NIST Risk Management Framework (RMF) accreditation.• Leads monthly… Show more My primary responsibilities in this role include:• Supports the system/application authorization and accreditation (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities commensurate with DoD and Air Force policies.• Provides expertise for the configuration and artifact creation of Platform Information Technology (PIT) systems in accordance with applicable guidance for NIST Risk Management Framework (RMF) accreditation.• Leads monthly Information Security Continuous Monitoring (ISCM) activities.• Crafts Security Test Plans (STP) and collaborates with SCA and AODR prior to implementation.• Participates in network and systems design to include artifact creation for RMF activities.• Crafts policies and procedures to ensure the confidentiality, integrity, and availability of information systems in order to defend against unauthorized access to systems, networks, and data.• Conducts risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs, including via STIG and ACAS assessments.• Leads biweekly team training on topics pertinent to defending against emerging cybersecurity threats. Show less

Haight Bey & Associates (HB&A) is a prime DoD contractor headquartered in West Haven, UT. One of HB&A's core capabilities is providing Tactical Meteorological Observing System (TMOS) logistical and cybersecurity support to the United States Air Force. My main responsibilities in this position include:- Creating hardened weather system laptop patch for USAF customer using Windows PowerShell on a monthly basis- Conducting monthly STIG and ACAS scans on relevant TMOS system components… Show more Haight Bey & Associates (HB&A) is a prime DoD contractor headquartered in West Haven, UT. One of HB&A's core capabilities is providing Tactical Meteorological Observing System (TMOS) logistical and cybersecurity support to the United States Air Force. My main responsibilities in this position include:- Creating hardened weather system laptop patch for USAF customer using Windows PowerShell on a monthly basis- Conducting monthly STIG and ACAS scans on relevant TMOS system components and identifying applicable vulnerabilities and fix actions- Working with CISO and Senior Cybersecurity Engineer to build Risk Management Framework (RMF) packages for TMOS system- Performing routine internal network mapping, asset vulnerability scanning, threat hunting, and event log analysis, and working with company Managed Security Service Provider (MSSP) to classify and resolve alerts- Ensuring operational and IT system processes fall within compliance scope of NIST 800-171, CMMC and DFARS 252.204-7012- Helping maintain HB&A's System Security Plan (SSP), Plan of Action & Milestones (POA&M), Incident Response Plan (IRP), and other ongoing compliance documentation- Assisting with day-to-day IT functions such as workstation deployment, hardening and troubleshooting Show less

Totem Technologies was formerly an operating unit of Haight Bey & Associates but became an independent company in 2023. Totem Tech helps DoD contractors, especially small- and micro-businesses, with fulfilling contractual cybersecurity obligations.My main responsibilities in this role include:- Providing consulting and training services to DoD contractors on NIST 800-171, CMMC and DFARS 7012 through workshops, on-site gap assessments, user & administrator training, and other… Show more Totem Technologies was formerly an operating unit of Haight Bey & Associates but became an independent company in 2023. Totem Tech helps DoD contractors, especially small- and micro-businesses, with fulfilling contractual cybersecurity obligations.My main responsibilities in this role include:- Providing consulting and training services to DoD contractors on NIST 800-171, CMMC and DFARS 7012 through workshops, on-site gap assessments, user & administrator training, and other services- Helping clients fulfill Facility Related Control Systems (FRCS) cybersecurity obligations- Educating small businesses on cybersecurity best practices- Helping plan, develop, test and administer cloud-based SaaS Totem™ cybersecurity compliance tool- Creating content for www.totem.tech including blogs and cybersecurity tips- Helping lead engagement efforts to expand company footprintMy accomplishments in this position include:- Developed the Totem Top 10™ - derived from controls recommended by leading organizations, these are the 10 most important cybersecurity safeguards that any organization should implement to lower its cybersecurity risk- Presented Totem Top 10™ to major entities such as the Pacific Northwest Defense Coalition (PNDC) and Utah Safety Council (USC)- Curator and lead instructor for Totem Top 10™ Workshop: a 5-part (1.5 hour/session) series discussing each control in detail and their applicability to small and medium-sized businesses. Delivered quarterly through Govology platform. Show less