Robert Craig Email & Phone Number

Baton Rouge, La, Us

Boston, Massachusetts, Us

I am an ISSO. More to come...

Reston, Va, Us

I essentially served as an interim ISSM (technically an ISSO position but really an ISSM at most organizations) for 6 months at NOAA when the original applicant dropped out. I oversaw the security for a series of supercomputer systems spanning three physical locations and also three cloud service providers; while I am ultimately responsible for ensuring the ATO process goes smoothly and system documentation is in order, and I helped manage a security team and was the POC for cyber issues. I am now an engineer and help ensure compliance with CISA BODs, NOAA policy, and providing guidance on remediating complicated security issues within an HPC (high performance computing) environment.

Fairfax, Va, Us

(This is basically a continuation of my last position. Peraton lost the ISSO contract.) Maintain security posture of three systems and one minor, and act as a policy and technical advisor on these systems, including one high value asset. Acted as chief security POC for these systems and briefed the CTO on their status on a biweekly basis. Helped systems prepare for ATO audits by working through the DHS 4300a and NIST 800-53 controls, analyzing FEDRAMP packages, and writing the controls in CSAM. Maintain system security posture by creating POA&Ms in CSAM, and suggesting remediation courses to engineers via analyzing Nessus and STIG results, this includes submitting POA&Ms for closure and monitoring for ISVMs (vulnerabilities). Select Highlight: Used Python and Excel formulas to create scripts to analyze Nessus results and to automate report generation. Also wrote a Python programs to interact with the CSAM API and automate control inputs. Closed around 100 POAMs on the systems.

Chantilly, Virginia, Us

Responsible for maintaining the security posture and documentation on various systems using Xacta, responsible for acknowledging vulnerabilities and acting in an adviser role to System Owners and Information System Security Managers about various cybersecurity threats.

Protected Air Force Labs from Cybersecurity threats: Conducted Nessus/ACAS Scans and STIG scans (SCAP or STIGviewer) to harden systems against malicious activity and prepared ATO packages for government approval via the Lab’s custom RMF process . Monitored network traffic for malicious traffic and data exfiltration using the Elasticsearch Stack. Conducted tests on new software packages looking for malware, malicious traffic, beaconing, etc.

Protected Banks and Credit Unions from Cybersecurity threats: Provided numerous services to banks and credit unions including internal and external penetration testing, IT audits, in-person social engineering tests (as well as vishing and phishing campaigns), and security awareness training. Installed vulnerability scanners and assisted organizations with interpreting and remediating issues found during testing.Select Highlight: Created the external penetration testing curriculum for Tracesecurity and trained the interns using the curriculum. Utilized python Selenium and Bash Scripts to create automation software for several services. I cut down a one to two hour report writing process to a 15 minute process that can run in the background.

I assisted the church in creating digital records, and also assisted with other software and hardware tasks. I also used office software to create promotional materials, flyers, and presentations. Worked with poor and homeless to get assistance from church.

Demonstrated ability to communicate effectively: Tutored for the English, Math, Reading, Science, and Essay portions of the ACT. Clients were guaranteed a two-point score increase or they receive a full refund.Select Highlight: Raised one disabled student’s score from a 17 to a 23. This allowed him to go to college.

Educator: Taught students grammar and writing skills via direct instruction and technical presentations. Used assessment metrics to create individualized learning plans for students with learning disabilities as well as academically advanced students in accordance with state guidelines. Maintained classroom control in one of the lowest socio-economic schools in the South.

Multicultural experience: Worked in South Korea to teach the English language to Korean and Filipino Students. Taught course without books for the first 2 months to students. Acted as a relationship facilitator during business meetings with the host school in Texas and the school in Korea.Select Highlight: Learned basic Korean to communicate with students since many could not speak English. (I also ate dog. It was an accident.)

Master Of Arts (M.A.), Christian Apologetics

Bachelor Of Arts (B.A.), English Language And Literature/Letters

Education record