Nicholas Wittman Email and Phone Number

As a Business Experience Planning & Admin Specialist, I was responsible for a variety of duties such as...- Utilizing Confluence and Jira to conduct tracking and reporting of countless Operational Risk Issues across various interests, ranging from Public Cloud Security to Enterprise Network Solutions and everything in between.- Pooled together from a variety of sources, these Confluence pages act as a centralized Information Hub for users, managers, and directors to get the most up-to-date status of each respective issue, as well as key information on milestone start / end dates, process delays, and outside dependencies.- Establishing communication lines with Internal Risk Owners and working in collaboration with them to ensure the accuracy and validity of Risk Remediation milestone documentation, target dates, policy procedures, and Artifact expectations.

Rotated through 4 different Technology Job Functions to gain experience in many different technology oriented positions.As a Secure Software Developer / Analyst (Aug-Oct), I created Unit Tests to increase Pytest coverage for a variety of business applications. Additionally, I collected and analyzed various streams of JSON data for use in collaborative Unit Testing efforts among the Secure Software Team.As a TechOps Analyst / L1 Operator (Oct-Jan), I conducted Monitoring and Acknowledgment of events and incidents for a wide variety of business applications and assisted in elevating complex tickets to the L2 Team. Additionally, I created several PowerShell scripts to aid in the Automation of several business functions and reduce occurrence of human error and need for human interaction.As a Security Analyst / Application Vulnerability Assessment (AVA) Analyst (Jan-Mar), I utilized Splunk to analyze Event Logs and create customized Regex Searches to filter, find, and isolate attack logs in a Production Environment. I then created an Interactive Splunk Dashboard to help visualize, demonstrate, and showcase these searches in an effort to raise awareness on the presence of attacks occurring along the network.As a Data Analyst working on our operational Datastore (Present Rotation), I assisted in a large-scale decomission project intended to revitalize and modernize various reports and table fields. In this role I largely utilized Tableau, Hue, and Alaition to research the aforementioned reports and document my findings for later coordinated report updates.Additionally took part in the PNC TDP Hackathon (Dec 2022), an initiative focused on promoting and enabling customers to donate to charity by tasking teams of TDPs to create Frictionless API Donation Portals focused on efficiency and security. In this, I acted as one of the two Front End Developers and was the Lead Q&A Spokesperson for my team at the Live Presentation.

By request from WGU, I acted as a Subject Matter Expert and assisted in Beta Testing two of their latest courses, Cybersecurity Architecture and Engineering, and Secure Software Design. This involved taking a multitude of practice exams, providing feedback on question content, and helping to determine the cut score / passing rate for the course.Topics covered in these courses include…-Cybersecurity Architecture and Engineering (D488) : Common attack types and patterns, Defense in Depth standards, Encryption, Ciphers, and Penetration Testing tools and methods.-Secure Software Design (D487) : STRIDE and DREAD security assessments, Building security into the Software Development Lifecycle, DevSecOps Framework, and protections against common vulnerabilities in code.

Analyze sensitive and confidential microfiche for creation of digital copies.Modify and utilize scripts for more efficient auditing processes.

Assisted in work regarding various business functions, including data audits and analysis, marketing, and Corporate Strategy

In conjunction with my Computer Forensics 2 Course, I created an Incident Response Plan (IRP) with guidance provided by Clearview Federal Credit Union. In addition to listing standard security and response tactics, this document also went on to list the additional security measures for financial institutions.