Seth Lucci Email & Phone Number

Round Hill, VA, US

Herndon, VA

• Position, scope, and deliver professional services solutions
• Develop and participate in technical RFP and SOW generation, including technical requirements gathering
• Conduct PCI assessments in conjunction with customer requirements
• Complete assessments of security standards, technologies and regulatory mandates while ensuring customer satisfaction
• Enhance and maintain relevant security skillsets and capabilities to stay at the forefront of the security industry
• Foster client relationships by providing support, information, and guidance

Mclean, VA

• Provided security risk assessments and comprehensive IT security risk management recommendations to all Freddie Mac business units
• Provided risk and compliance process gap analysis benchmarked against industry leading standards
• Project lead for pilot assessments and adaptation of new Risk Management Framework for entire Freddie Mac enterprise based on NIST 800-53 security controls
• Developed work packages for new Freddie Mac Risk Management Framework to include: system security plans, security test plans, security assessment results, plan of action and milestones (POA&M) and security control.
• Developed NIST based interview questions and assessment methods for new Freddie Mac Risk Management methodology- Key personnel for the transition of Risk Management methodologies from an ISO 27001, COBIT, NIST 800-53.

Ashburn, VA

• Led OCIO personnel at satellite site providing both Delegated Authorizing official Representative (DAOR) and Security Control Assessor (SCA) and Information System Security Officer (ISSO) support for National.
• Operations lead and mentor for 3 junior employees within RMD at satellite site
• OCIO Security Control Assessor for client site, assessments including operating systems (OS), applications, hardware, network devices, storage, database and cross-domain solutions. Assessment guides include CNSSI 1253.

Reston, VA

• Certification and Accreditation Lead of an NGA Program of approximately 130 personnel
• Led, designed, implemented and consulted security solutions for over 140 ISP (Infrastructure Service Provider) and ASP (Application Service Provider) accredited IT systems.
• Provided subject matter expertise on DOD IC policy and regulation for client and program with emphasis on DCID 6/3 and NIST 800 series security controls and policy
• Reviewed, maintained and ensured all C&A documentation to include; System Security Authorization Agreement (SSAA), Security Plans and security test and evaluations are complete
• Analyzed Security Assessment Reports (SARs) that include SRR, DISA Gold disk and E Retina scan results for system vulnerabilities

Shape Mons, Belgium

• Responsible for establishing, implementing, maintaining and enforcing Configuration Management (CM) plans and processing according to the established Service Provision Authority Concept of Operational Support for.
• Change Advisory Board (CAB) Chairman for the NATO International Services Assistance Force (ISAF) in Afghanistan for all Computer Information System (CIS) configuration change proposals
• Prepared and provide CM requirements, inputs and advice during the development of capability packages and cost estimates

Master Of Business Administration (M.B.A.), Business Administration And Management, General

Bachelor’S Degree, Business Administration And Management, General