David Thurston Email & Phone Number

Annandale, Va, Us

Falls Church, Va, Us

Provided Cyber Security engineering and implementation for satellite space and ground segments, including human spaceflight missions.Served as organization’s Splunk subject matter expert, implementing aggregation schemes and developing dashboards. Managed audit aggregation schema including docker to journal audit management, rsyslog, nxlog, and Splunk.Supported multiple government customer implementations of NIST 800-53 Rev 4 and Rev 5 frameworks.Designed and ran contingency exercises.

Falls Church, Va, Us

Served as Information System Security Manager (ISSM) for thirteen networks supporting multiple government customers. Transitioned several networks to RMF A&A methodology. Managed team of ISSOs. Delegated taskings and ensured that all, programs were amply supported by members of the team.Oversaw the implementation of new system security compliance tools including Splunk and Nessus. Self-taught Splunk and developed RMF-compliant CONMON dashboards now used across the organization, reviewed and accepted by multiple SCAs.Developed Plans of Action and Milestones, System Security Plans, Security Control Traceability Matrices, and Continuous Monitoring PlansOversaw implementation of patch management programs in compliance with multiple customer requirements. Worked with SA teams to ensure patching was done in a timely manner to keep systems protected from the latest vulnerabilities.

Reston, Va, Us

Hold dual role as regional ISSO with accountability for 80+ accredited systems and Lead Action Officer. Develop and institute security profiles for Windows and Linux systems. Steer five Action Officers through security incident investigations and personnel interviews. Remediate infected systems, produce and edit incident reports, and serve as primary liaison with the Defense Security Service (DSS) for all security incidents. Provide awareness and education to newly cleared personnel, new hires, ISSOs, and system users. -Appointed as interim ISSM as needed, interfacing with the DSS, creating system security plans (SSPs) for C&A activities, and contributing to government inspections. -Held role in planning and preparing information security program for annual government audits, including superior results with zero deficiencies in 2012. -Revamped information security presentation delivered to new hires and newly cleared personnel, reducing presentation time from 3 hours to 90 minutes without compromising pertinent information.-Provided training to ISSOs and other information security personnel in delivering effective briefings. -Contributed to coordinating several internal conferences, including generating and assigning speaking topics, ensuring unified look and feel of presentations, hosting events, and creating education materials.

Reston, Va, Us

Maintained unclassified development and testing network as well as built domain-based and P2P Windows networks; created IEEE-compliant design documentation.-Functioned as local ISSO for network and six standalone systems.-Served as test manager for successful CMMI audit of software development processes and held role in providing classroom instruction for audit preparation.-Simplified and improved project collaboration by implementing and administering Micro Strategies configuration management tools.