• Works on a shift alongside incident response team to relate, scope, and triage alerts and notifications from the SIEM, security sensors, ticketing system, walk-ins, and phone calls. • Collaborate with the incident response and operations teams to qualify events as security-relevant and determine true and false positives. • Use knowledge of incident response lifecycles, common cyber-attacks, and federal incident reporting requirements in order to thoroughly investigate and remediate any discovered security relevant events.• Use knowledge gained from investigations to apply threat hunting tactics and techniques to ensure safety and integrity of the network. • Document and escalate tickets for adjustments on security tools and tuning requests.

• Lead and coordinate multiple teams in order to integrate current and NexGen infrastructure into cloud-based environment’s and adhere to all security standards and best practices. • Assist clients in receiving and maintaining Authority to Operate (ATO). • Lead continuous monitoring assessments including vulnerability analysis on Cloud based systems and remediation all discovered vulnerabilities.• Used CSAM functionality to enter in security control implementation statements and related artifacts in preparation of assessment for Authority to Operate

• Applied risk management framework methodologies across various organizational systems in order to acquire enterprise Authority to Test (ATO) based on NIST and FISMA standards.• Drafted and maintained System Security Plans, Risk Assessments, Risk Acceptance Memo’s, MOU & ISA and other related RMF documentation on organizational systems in order to obtain Authority to Test (ATO).• Used CSAM functionality to enter in security control implementation statements and related artifacts in preparation of assessment for Authority to Test. • Developed, designed, and implemented ATO acquisition processes for organizational entity that was previously non extant.

• Scripted tools for creating, rewriting, and authenticating network Access Control Lists. • Developed baseline ruleset for Access Control List creation. • Created scanning tool for authenticating network Access Control List against ruleset.• Validates secure systems, tests security products/systems to detect computer and information security weaknesses.• Created python scripts for automating credential authentication of network security cameras and other internet of things devices on network. • Created python scripts for identification of security cameras on the network. • Reviewed IT systems security policies and procedures. • Verified application installation procedures, internal control testing, evidence gathering, and security protocol testing. • Assisted with corrective action development and implementation. Assisted with assertions of assessable units, and reporting.• Reviewed and authenticated Firewall Access requests from system owners for system integrations. • Assisted with patch management and security updates of multiple IT systems on the network.

• Reviewed and authenticated Firewall Access requests from system owners for system integrations. • Assisted with patch management and security updates of multiple IT systems on the network.