Phillip Harrell Email & Phone Number

Greenwood Village, Co, Us

Builds, deploys and optimizes security controls and instrumentation in and around software code.Deploys automated mechanisms to integrate audit logs, penetration testing, and vulnerability scans for investigation and response to suspicious activities.Identifies architectural and other security risks associated with the solutions, and compensating controls where necessary.Stay up to date on cybersecurity software architecture, development, testing, and standards related to the medical device industry.Define, document and implement the technical architecture, operational processes and security policies from multiple engineering teams.Collaborates and consults with Agile development teams on security-critical product features.Consults with product, development, and quality engineering teams to help ensure products are safely designed and correctly implemented.Provides security architecture and advice in support of application development, and infrastructure projects.Collaborates with teams to find solutions that minimize security exposure.Participates in and remediates issues related to compliance audits.Educates developers on security best practices and identifying common vulnerabilities.Acts as a resource and mentor for team members within the software organization, particularly with regards to cybersecurity risk analysis, requirements, architectural design, and testing.Coordinates security activities with corporate Governance Risk and Compliance team.

Castle Rock, Colorado, Us

Herndon, Virginia, Us

Herndon, Virginia, Us

Information Systems Security Engineer March 2017 to PresentALKU Government Solutions | Herndon, VA• Analyzes, reviews and approves Cloud security architecture documentation IAW NIST and ICD 503 guidance• Conducts Web Application and Database vulnerability scans using HP WebInspect in order to identify system attack surface/s while providing recommended guidance for patching and configuration to obtain C&A on multiple networks• Presents correlation of returned Vulnerability IDs from Attack Status reports with Vulnerability Detail reports providing in-depth analysis of findings for system administrators and developers while providing Executive Summary information for Stakeholders• Utilizes Nessus to create custom policies, active scans, and report generation for scope-specific requests• Performs network common vulnerable ports and services check using NMAP for speed of use and reasonable accuracy; additional use is to determine presence of firewall between two hosts• Applies Ariel Query Language syntax (AQL) to IBM Qradar in order to build dashboards reflecting system state-of-health and alerts for nefarious activity• Utilizes Host Bases Security Solution (HBSS) to provide granular access and executable control of systems deployed within multiple network enclaves• Provides Data transfers between multiple levels of network classification • Adheres to NIST, DODI, and ICD 503 guidance for system hardening, cyber security best practices, and developing program TTPs for continuity of operations

Chantilly, Virginia, Us

• Implements planning, coordinating, executing and providing deliverables associated with Command Cyber Readiness Inspection site-assisted visits IAW Department of Defense governance and performance measurement the Evaluator Scoring Metrics v9.2 (ESM), DoDI 8530.01, CJCSI/CJCSM 6510.01A/B, and NIST 800-53. • Provides DoD Standards and Governance gap analysis from a technical configuration standpoint to federal mission organizations regarding cyber security posture• Recommends and maintains effective and communication before and after assessments ensuring quality control and assurance procedures to ensure delivery of post-assessment reports.

Mclean, Va, Us

Cybersecurity Services Provider Auditor March 2016 to PresentBooz | Allen | Hamilton - Chambersburg, PA• Leads and conducts interviews with all Department of Defense Components (DoD) and all DISA/DIA certified CNDSPs for the entire DODIN using as governance and performance measurement the Evaluator Scoring Metrics v9.2 (ESM), DoDI 8530.01, CJCSI/CJCSM 6510.01A/B, and NIST 800-53. • Provides operational gap analysis in cyber security service providers’ functional capabilities to offer tailored enterprise services and mitigation strategies to their subscriber’s base of operations• Serves as lead instructor for Client training course on the subject matter of the auditing and inspection methodology and philosophy; Provides students from DoDIN and Federal mission partner global operations community with guidance, philosophy, and applicability of the ESM and its higher supporting governance to their organization’s cyber security defenses• Provides technical support and guidance to site personnel before, during, and after assessments on matters relating to determining quality of inter-collaboration between DoD Component Head and Federal mission partner organizations and their sub-component organizations capability to protect, detect/respond, and sustain operations and information stored, received, and transmitted on federal networks worldwide• Presents audit findings to auditee site senior leadership regarding their operational and security posture following a Cyber Security Service Provider inspection

Arlington, Virginia, Us

• Analyzed, executed and reported on approx. 3000 Cyber Attacks against information systems in support of United States Force Korea (USFK) mission and its subordinate military organizations. • Interfaced directly with Brigade Commander giving a classified brief regarding cyber incidents on a semi-weekly basis. Received public praise from the same with Brigade Coin honors. • Coordinate with Information Assurance (IA) on vulnerability assessments to collaborate, plan, and execute remediation of software vulnerabilities on over 130 RCC-K desktop operating systems IAW DISA, ARCYBER and other Higher Agencies (NIPR/SIPR).• Key participation in 10 OPORD Capture-The-Flag exercises. Performed analysis, direction and execution against cyber-attacks using open source and proprietary sensors primarily from a defensive posture. • Simulates live Cyber Attack environment: Analyzed firewall logs, IP Audit, SNORT, AD, and HBSS for filenames, hash of files, suspicious IP addresses, new account creations, escalated privileges, etc. Reported activity to ACOIC.• Team Lead on Command Cyber Readiness Inspection (CCRI) 2015. Received impact award from 6th RCC-K for organizing, planning, and implementing remediation of discovered software vulnerabilities, user account deficiencies, network medium classification labeling, etc.• Actively monitors, isolates and corrects issues with enterprise LAN/WAN networks, nodes, and transport services throughout the Korea Peninsula.• General Officer level support, including working with CCST and VIP support teams, for Blackberry Enterprise Services, DISA Enterprise Email, and Mobile Service Platforms

Security Risk Analysis, Cyber/Computer Forensics And Counterterrorism

General Studies, Information Technology