Royland Wright Email & Phone Number

Richmond, Va, Us

Washington Navy Yard, Dc, Us

Utilized GitHub repositories to create and manage issues, fostering team collaboration and tracking project progress effectively.Implemented technologies such as Web Application Firewalls (WAF), Security Information Event Management (SIEM), and endpoint security solutions, significantly strengthening defense against cyber threats.Accomplished detailed vulnerability scans of information systems, networks, and applications hosted on Amazon GovCloud, securely uploading scan results to Amazon S3 buckets for thorough analysis and reporting.Coordinated with cross-functional teams such as developers and engineering to achieve and maintain compliance and Authorization to Operate (ATO) for information systems, fostering collaboration and alignment with security objectives.Performed annual security reviews to validate compliance with policies and standards, driving continuous improvement in security posture.Maintained consistency in documentation and reporting, ensuring clarity and professionalism in all communications.

Falls Church, Va, Us

• Designed and implemented IAM solutions according to NIST 800-207 guidelines, resulting in enhanced authentication and authorization processes.• Implemented Zero Trust principles to enhance network security and prevent unauthorized access.• Led incident response efforts, investigating and mitigating security incidents in adherence to Zero Trust principles.• Generated detailed compliance reports for Information System Security Manager (ISSM) and CIO, enabling data-driven decision making and improving overall security posture.• Conduct technical vulnerability assessments and track remediation activities in the Plan of Action and Milestones (POA&M).• Generate Department of Defense (DoD) Certification and Accreditation Process, Risk Management Framework (RMF) packages, and collaborate with staff agencies to obtain required IATT and ATO certifications.• Collaborate with and provide IA technical direction to the existing engineering team and non-engineer personnel.• Conducted patch management for information systems using Microsoft Endpoint Configuration Manager (MECM/SCCM), resulting in a 95% reduction in system vulnerabilities.• Leveraged Tenable.sc /Nessus security tools to conduct vulnerability scans for networks and systems, identifying and prioritizing critical vulnerabilities for prompt mitigation.• Implemented end-to-end Vulnerability Management workflow utilizing industry standards including CVE, CPE, CVSS, and MITRE ATT&CK, resulting in a 20% increase in effective vulnerability identification and timely remediation.• Implemented and maintained cybersecurity measures to ensure compliance with HIPAA regulations and protect sensitive healthcare data.• Managed SOC operations, including incident detection, response, and escalation procedures, ensuring effective and efficient handling of security events.• Collaborated with cross-functional teams to improve SOC processes and enhance overall security posture.

Robins Afb, Ga, Us

• Developed and executed security policies, standards, and procedures resulting in 100% compliance with regulatory requirements.• Collaborated with cross-functional teams to analyze and assess security solutions, resulting in improved information assurance vulnerability management.• Produced comprehensive vulnerability and threat analysis reports in adherence to industry best practices and guidelines.• Automated system vulnerabilities scanning and report generation on a weekly basis, resulting in 98% of identified scans remediated within 30 days.• Monitored and analyzed network traffic and system logs using Splunk to detect security breaches and vulnerabilities, resulting in a 20% increase in threat identification efficiency.• Conducted in-depth analysis of system vulnerabilities, resulting in the creation of vulnerability reports outlining potential risks and mitigation strategies. • Implemented categorization process for information security system, referencing FIPS-199 and NIST 800-60 standards to enhance overall compliance and risk mitigation strategies.• Implemented threat intelligence feeds to enhance proactive incident response capabilities and mitigate future risks.• Managed user accounts, groups, and permissions within Microsoft Entra ID (Active Directory), enhancing access controls and security policies.• Ensured SOC 1 and SOC 2 compliance by conducting risk assessments, implementing security controls, and maintaining documentation.• Prepared for and participated in SOC 1 and SOC 2 audits, working with external auditors to demonstrate adherence to security and data protection standards.

Fort Belvoir, Va, Us

• Implemented and maintained a Zero Trust framework, achieving full compliance with NIST 800-207 standards and best practices. • Collaborated with cross-functional teams to improve SOC processes and enhance overall security posture.• Managed SOC operations, including incident detection, response, and escalation procedures, ensuring effective and efficient handling of security events.• Provide metrics that demonstrate a consistent 100% security posture with zero security incidents by monitoring systems and configuring systems to detect and prevent security incidents.• Conducted regular security assessments and vulnerability scans using Tenable.sc ACAS/NESSUS, resulting in the identification and mitigation of potential risks within the organization.• Developed and implemented security protocols based on industry best practices and NIST guidelines, resulting in 100% compliance with Zero Trust principles.• Developed and enforced least privilege access controls, employing continuous authentication mechanisms in alignment with NIST 800-207 guidelines.• Successfully implemented and managed IAM policies and roles to effectively control access to AWS resources, ensuring data security and minimizing the risk of unauthorized access.• Implemented least-privilege principles across AWS cloud infrastructure, reducing security risks by 25% and enhancing access security.• Established and maintained security documentation for SaaS, PaaS, and IaaS, including policies, procedures, and guidelines, to facilitate a standardized and secure cloud environment across all service models.• Subject matter expert in advising for RMF packages, strategies, and technical components to ensure compliance of NIST 800-53 security controls and DISA STIGs.• Participated in security incident response exercises and tabletop simulations to test and validate incident response procedures.

Master'S Degree, Applied Artificial Intelligence

Cybersecurity Management And Policy, Cybersecurity