Ronald Nemes Email & Phone Number

Baltimore, Md, Us

New Orleans, La, Us

Teaches various Cybersecurity courses including Ethical HackingDigital Forensics and Incident Response (DFIR)Microsoft Security Linux SecurityPython

Baltimore, Md, Us

Teaches various Master's level Cybersecurity courses including Enterprise SecurityManaging Cybersecurity Operations Introduction to ICS Cybersecurity

Herndon, Virginia, Us

ManTech acquired Minerva Engineering

- Provides direct leadership, management, and subject matter expertise on multiple ICS vulnerability assessments identifying security gaps affecting critical infrastructure IT/OT systems - Review and asses program documentation, asset inventory management, IT and OT network architecture and design, and analysis of vendor specific threats for IT/OT software/firmware through interviews, network traffic analysis, and visual inspection. - Designs client IT/OT security reference architectures based on the Purdue Enterprise Reference Architecture(PERA) and Unified Facilities Criteria(UFC) 4-010-06 Cybersecurity of Facility-Related Control Systems to create network segmentation/segregation and minimize impact to availability of ICS/SCADA systems. - Provides IT/OT threat analysis and scoring based on known vulnerabilities and potential exploits affecting IT/OT systems and development of mitigative measures to improve these systems Cybersecurity resilience. - Brief key stakeholders on identified risks and detailed mitigation plans to improve cyber hygiene across the program.ICS/SCADA Vulnerability Assessment | Cyber Security Architecture | Risk Management Framework

Houston, Tx, Us

When this government services company was looking to expand their cyber security footprint, they called on me.Leveraging my relationships that span the DOD, federal and commercial spectrum, I’ve built a cyber security business development pipeline to >$100M, contributed to RFP development and negotiations to enter into 3rd-party partnerships with leading industry players.In addition, I’ve laid out the vision and strategy, and shored up the network backbone, for the company’s first cyber lab for electronic security and industrial and control systems (target date for completion: Q1 2018). I’m brought in whenever cyber security technology expertise is required related to: Continuous Monitoring | Security Incident + Event Management (SIEM) | Cyber Modeling + Simulation (Cyber Range) | Cyber Security Architecture | Penetration Testing | Ethical Hacking | Cloud Security | Risk Management Framework

Baltimore, Md, Us

I transformed this startup effort into a mature cybersecurity practice, growing its ground-up revenues to $550K in 12 months and attaining 100% retention amongst Fortune 500, government, PE and nonprofit clients spanning industries (financial services, healthcare, construction management, academia and CPG, to name a few).The team of 7 I recruited, hired and trained are regarded today as cybersecurity SMEs, and SOPs, reporting and presentation methodology I created and instituted ensure data accuracy and sound operational practices that positioned this firm for solid continued growth. I’ve expanded our strategic service offerings to include Cybersecurity-as-a-Service (>25% of clients have signed on), HIPAA compliance audits targeting healthcare companies, and enterprise vulnerability platforms for multisite clients.Clients hire us to provide risk management guidance, and to perform assessments to identify areas of vulnerability and non-compliance.PRACTICE HIGHLIGHTS:☑ Directed practice activities from RFP to assessment, solution development to delivery. Sustained a 95% client satisfaction rate. ☑ Drove development of a secure and virtual in-house IT network. Locked downed hardware and software via secured configurations.☑ Increased assessment volume by leading onsite National Institute of Standards + Technology Risk Management Framework (NIST RMF) assessments on behalf of Federal clients.

Chantilly, Virginia, Us

I contributed to growing this cybersecurity firm’s presence by guiding NIST RMS transitions, and overcoming reluctance to drive the adoption of routine risk assessments to replace infrequent audits. Government agency clients included Defense Media Activity (DMA), the Pension Benefit Guarantee Company (PBGC) and the Social Security Administration (SSA). PROJECT HIGHLIGHTS:☑ DMA: Directed early NIST RMF adoption by DOD and drove accreditation of 8 at-risk systems in 4 months. ☑DMA: Streamlined risk-based authorization process, refined vulnerability scanning model and enhanced network security via a SANS-based incident response process that expedited incident identification and resolution.☑ PBGC: Ensured new and existing systems compliance, and gained buy-in for quarterly vulnerability scans to replace static 3-year audits. Led team of 7 for Veris’ first project with this agency.☑ SSA: Supported Project Manager as member of large, 20-person team challenged with maintaining systems accreditation and performing monitoring as part of a continuous security solution.

Washington, Dc, Us

I gained Cybersecurity SME status during the 7 years spent supporting U.S. Army field systems and Project Executive Offices (PEOs). My efforts drove security and compliance through integrations, assessments, monitoring, tracking and risk mitigation – and supported the development and evolution of technology aimed at improving communications to and from our military’s front lines. PROJECT HIGHLIGHTS:☑ Drove adherence of 8 SATCOM systems onto DIACAP risk framework, and ensured compliance with STIGs, ARMY and DoD guidelines, by performing vulnerability and compliance assessments. ☑ Developed and implemented standardized Information Architecture (IA) security architecture to support single sign-on and third-party web-based applications used in mounted computer environments.☑ Performed risk assessments and served as IA lead throughout development of remote communications systems designed to simultaneously handle secure and insecure messaging.☑ As lead for Integrated Computer System Information Assurance Support, evaluated implications of future combat system designs on system security requirements in collaboration with the CSA. ☑Assisted in engineering design, developmental and operational testing of IA security components for integration exercises. Developed SOPs for software maintenance, anti-virus updates and patches.☑ Produced Software Quality Assessments via static code analysis. Performed software error and vulnerability analysis, and provided recommendations on mitigation and remediation, to achieve Army certification.

Washington, Dc, Us

Develops and implements security solutions for the Common Operating environment and designs the security architecture from a system of systems perspective.

Washington, Dc, Us

Information Assurance / Cybersecurity

Masters Of Professional Studies, Cybersecurity

Master Of Science (M.S.), Computer Software Engineering

Bachelor Of Science (B.S.), Computer Science