Nicholas Solimini, Cissp Email & Phone Number

United States

Florida, United States

-Recognized as a Vulnerability and Risk Management SME and advisor to some of the world’s largest organizations-Meet with prospective clients to discover their biggest security challenges -Map Tenable’s unique business value and differentiators to their challenges and business drivers-Perform custom portfolio demonstrations based on strong discovery questions

-Lead vulnerability management initiatives. -Participating in network and web based penetration test assessments.

Central Florida

-Recognized as a Subject Matter Expert (SME) in vulnerability management and provide guidance to all application, infrastructure, and remediation teams.-Leading adversary emulations utilizing known TTPs for threat actors that target the financial industry. -Project lead for integrating the MITRE ATT&CK Framework into our testing methodologies to measure and improve cyber-security effectiveness.-Single Point Owner for projects as needed for the Security Assurance Team.-Single Point Owner for enterprise vulnerability scanning for all Corporate and Retail systems.-Act as a member of the Enterprise Security Assessment Team to asses any deviations from documented security policies.-Develop and maintain systems Application Security Plan, Technical Design Document, InformationResource Classification Document, and Disaster Recovery Plan.-Recognized as a SME for performing external vulnerability scans for determining externalfootprint, attack vectors, and PCI ASV compliance.-Participate in quarterly penetration tests against information systems and applications.-Single Point Owner on the creation and execution of email phishing campaigns.

Central Florida

-Recognized as a SME for the use of the file integrity and change monitoring tool. -Perform auditing of Corporate and Retail IT systems with the use of the enterprise configuration auditing application.-Perform vulnerability assessments against Corporate and Retail IT systems. -Singe Point Owner for Symantec PGP Data at Rest Encryption.-Train Associates in the use of the vulnerability management tool.

Ensuring the confidentiality, integrity and availability of systems, networks and information through the planning, analysis, development, implementation and enhancement of information security systems.Act as Information Systems Security Officer (ISSO).Assessing and documenting information assurance (IA) capabilities and services.Develop, implement, and maintain a System Security Plan.Develop and maintain an IT Contingency Plan.Utilizing knowledge of information systems security principles, methods, regulations and policies to draft, review or validate information security documentation. Auditing of information technology (IT) systems and networks to ensure accreditation.

Ensure the confidentiality, integrity, and availability of information systems and networks with the use of Host Based Security System (HBSS), Intrusion Detection System, and Data at Rest Encryption (DAR). Recognized as a SME in Network Security and provide guidance to a large group of Information Assurance Workforce (IAWF) members assisting in compliance efforts. Principal advisor to all NSWC Crane Information Assurance Workforce (IAWF) members responsible for Data at Rest Encryption efforts.Assist the Information Assurance Manager in the development of policy, concepts, and approaches to Network Security.Perform work with minimal administrative direction. Prioritize my own workload as needed to meet ever changing requirements. Perform auditing of information technology (IT) systems with the use of HBSS to ensure systems remain in compliance for their accreditation Perform computer usage forensic investigations.Act as lead VMware ESX(i)/vCenter administrator.Provide guidance to other IAWF members and NSWC Crane management on VMware ESXi implementation.Act as McAfee ePolicy Orchestrator Host Based Security System (HBSS) administrator.Act as Symantec Endpoint Encryption administrator ensuring the integrity of NSWC Crane information technology (IT) systems in the event of a system loss or theft.Act as PGP Whole Disk Encryption administrator ensuring the integrity of NSWC Crane information technology (IT) systems in the event of a system loss or theft.Provide oversight to IAWF on Data at Rest Encryption (DAR) implementation.Act as Symantec Endpoint Protection administrator responsible for ensuring the integrity of NSWC Crane information technology (IT) systems in the event of virus/malware compromise.Perform vulnerability scanning using Retina Vulnerability Scanner to validate information security policies are implemented in accordance with IA/DOD directives.

Manage Active Directory ensuring the integrity and availability of Facilities domain. Create and edit group policy objects to ensure information systems security principles are applied to maintain Facilities regulations and policies.Manage centrally controlled McAfee ePolicy Orchestrator virus/malware solution ensuring the integrity and availability of systems.Act as manager to the Facilities part time Help Desk employees.Ensure Help Desk issues are resolved in a timely manner by daily reports from my team on Open and pending issues that are called in.Review Nessus vulnerability scanner reports for Facilities subnet as an audit of information technology (IT) systems and networks to ensure compliance of our security policies.Ensure latest security updates and patches are installed for third party software.Audit system logs to monitor for events.Perform Windows Server Update Services management.

On site repair and troubleshooting of both customer home computers and business workstations/servers.Malware and virus analysis and removalHome office and small business networking

Education record

Education record