Paul Butkiewicz, Cissp Email & Phone Number

Boston, Massachusetts, Us

Boston, Massachusetts, Us

Arlington, Va, Us

- Lead IT Information Assurance point of contact tasked with developing and implementing security programs across global platforms.- Managed strategic projects from conception to retirement, as well as post-build upgrade efforts, providing secure work environments.- Designed and implemented a vulnerability management process and assembled a team of subject matter experts from throughout the organization tasked with performing threat, risk, & vulnerability assessments, and developing mitigation strategies for fielded assets.- Regular CONUS/OCONUS travel to conduct penetration tests, regulatory compliance audits, and control validation tests (CVTs).- Identified and presented metrics to management & federal agencies, and developed Plans of Actions & Milestones (POAMs).- Provided expertise in security architecture to software, system, & hardware engineering throughout all stages of program lifecycles.- Developed security policies and training programs, as well as disaster recovery, incident response, contingency, and test plans.- Mapped federal, public, industrial defense contractor, and foreign military security controls to DIACAP and created a single security configuration for development and deployed systems, resulting in test platforms which mirror operational systems.- Authored work statements / scope definitions / proposal bids, and managed budgets and schedules for large complex programs.- Created an Information Technology Infrastructure Library (ITIL) Service Catalog and established Service Level Agreements.

Newport, Ri, Us

- Contracted through Systems Resource Management, Inc. to modernize the Command's Information Assurance program.- Develop System Security Authorization Agreements (SSAAs) and convert DITSCAP agreements into DIACAP format. - Conduct Certification and Accreditation (C&A) using periodic System Tests & Evaluations (ST&Es) - Develop Plan of Action and Milestones (POA&Ms) to list, and schedule for the remediation of, infrastructure security gaps. - Designed and maintained an SSAA/POA&M/ST&E database for automation of daily tasks; therefore improving team efficiency. - Assess system vulnerability and risk using the Information Assurance Risk Assessment (IARA) process.- Conduct network anomaly detection scans and execute corrective actions when necessary. - Assist the Command's Information Assurance Manager (IAM) with daily tasks. - Run eEye Digital Security Retina and Gold Disk network and system vulnerability scans on SIPRNET and NIPRNET machines. - Implement current DoD and DoN regulations and Security Technical Implementation Guides (STIGs) to ensure site compliance. - Conduct War Driving exercises to secure the sensitive wireless infrastructure of the command and protect against unauthorized transmission.

Cambridge, Ma, Us

- Appointed temporary acting-ISSM leading up to a DSS security audit. Commended on my successful efforts by senior Defense Security Service agents for turning around the posture of a few hundred information systems. - Travelled to Washington D.C. to perform an analysis of offsite networks and develop a vulnerability remediation strategy.- Control access to all classified material and automated information systems across multiple facilities. - Audit classified material inventories and Information Systems. - System penetration testing and intrusion defense system optimization.- Develop and implement security awareness training programs, newsletters, and web pages. - Maintenance of a master security plan and individual system plans. - Configure and certify computers to meet DSS requirements for classified processing. - Create and issue security briefings (NATO, CNWDI, RD, FRD, etc.) to cleared employees. - Manager of the corporation's main NSA COMSEC account. - Courier sensitive and classified material to and from remote facilities. - Order, operate, and maintain COMSEC equipment and key material.

Cambridge, Ma, Us

- Assist the Information System Security Manager with daily tasks such as documentation, auditing, and certification/accreditation. - Enforce policies, procedures, and directives for storage, transmission, marking, and destruction of classified information.- Advise on procedures governing classification, declassification, downgrading, and safeguarding of national security information. - Develop and implement procedures for proper dissemination and handling of classified material. - Conduct review/analysis of the element's plans for compliance with established policies/procedures. - Manage the communications security (COMSEC) program. - National Industrial Security Program Operating Manual (NISPOM) subject matter expert for the Document Control Office.

Encompassing the automotive, computer, and construction industries, Diablo Enterprises is an ongoing business experiment that allows me to continue building knowledge and experience in various trades. The venture began with Diablo Car Audio, a design and installation business which incorporated my passion for music into a business which required custom fabrication, electrical and mechanical engineering, and lots of creativity. The fabrication element quickly took off as customers began asking for custom racing components and bodywork. At that point, Diablo Enterprises was created as a parent company for Diablo Car Audio and the newly formed dStar Automotive. As my interests grew toward the racing market, I began selling/installing engine parts, and ImportEngineParts.com was formed as an internet-based company retailing high quality, low cost engine components and rebuild kits. After failing to find an affordable web designer who could meet the specifications I needed, I used my technical expertise and desire to learn new skills to teach myself web design. After finishing my new websites, I was approached by several other business owners to give their organization a web presence, which launched dStar Designs, a web and graphic design company. Today, Diablo Enterprises retains rights to all of its original brands; however, the business has taken an interest in property management, as well as light construction and woodworking, which launched Merrimack Valley Woodworking and New England Land & Property Management LLC.Additionally, I've focused on purchasing and building several successful businesses in unrelated markets in the interest of taking on new challenges. After sale, I stay on with some businesses in a consulting capacity, or remain a shareholder/stakeholder in the business.

Specializing in high-end cabinetry, Merrimack Valley Woodworking also builds commissioned furniture and built-ins, as well as custom storage solutions. Whether you're looking to update your kitchen, maximize a walk-in closet, outfit a home theater, or need to furnish an unusual space, we build to your specification.

Bachelor Of Science, Information Technology; Networking And Security Specialization

Associate Of Science, Management Information Systems