Rich Fleming Email & Phone Number

Aberdeen, Md

Creates and edits system security documents (PoAM, all relevant policies to meet the requirements of government assessments) for tactical networks undergoing the ATO process. Ensures all necessary STIGs and other RMF requirements are met as required by NIST 800 series of publications. Prepares for and assists with 3rd party SCA-V assessments using experience as a former assessor. Works with senior management to enable systems to earn an ATO. Performs regular scans of systems, identifies vulnerabilities and provides any necessary guidance in correction or remediation of identified vulnerabilities.Uses knowledge and experience in cybersecurity and IA to serve as SME for enterprise cybersecurity assessments. Explains high-level security requirements and deficiencies in an easy-to-understand manner. Excellent verbal and written communicator.Creates and maintains cybersecurity policy documentation for enterprise-level information system.Serves as SME for Cybersecurity Maturity Model Certification (CMMC) to include preparations for CMMC assessment and providing guidance to Senior Management on how to best accomplish new requirements. Schedules and leads meetings, is experienced in an environment with shifting priorities as security incident and events occur.

Aberdeen Proving Ground, Md

Aberdeen Proving Ground, Md

Coordinates, schedules, and performs technical portion of network security assessments using DoD regulations and security tools including ACAS, HBSS and SCAP. Interprets network device configuration files (routers and switches) and audits compliance with applicable regulations and STIGs.Works with clients to provide actionable feedback via results reporting. Submits these repors to higher headquarters including USCYBERCOM.

Responsible for monitoring client networks to detect suspicious and hostile activity that would jeopardize the integrity of information systems.Responsible for reviewing logs from various security tools and network traffic analyzers. Compiles information and prepares computer security incident reports based in intrusions, events, and incidents that are detected. Works closely with network engineers and system administrators to ensure mitigation of all activity detected. In addition assists in the evaluation, research and development of computer and network security tools.

Newark, De

• Monitor and analyze attempted efforts to compromise security protocols and escalate issues to higher level associates.• Review computer logs and messages to identify and report possible violations of security. Coordinate, document, and report on internal investigations of security violations.• Interact with customers to understand their security needs and assist in the development and implementation of procedures to accommodate them.• Health monitoring of McAfee Network Security Managers and sensors for multiple clients.• Health monitoring of IBM SiteProtector consoles and Proventia IDS/IPS sensors for multiple clients.• Analyze security events in Symantec, ArcSight and Qradar Security Information and Event Managers for multiple clients.• Monitor network intrusion attempts, and identify potential attacks from external as well as internal sources.• Escalate any signs of attack or problem to CSC clients, and assist them in their troubleshooting endeavors.• Evaluate possible network issues and attempt to resolve them using industry tools prior to client escalation.• Interaction with organizations which are internal and external to CSC in order to provide quality service to our clients.• Assist existing client’s Information Technology department (HelpDesk) with Pointsec encryption related challenges.• Monitor and maintains the NASS e-mail inbox by responding to e-mail inquiries and directing to the appropriate department via Pulse ticketing system.• Manages and responds to NASS Sametime chat with existing clients and various departments of CSC.

Master Of Science (M.S.), Digital Forensics

Bachelor'S Of Science, Cybersecurity