Marlon Anthony Mcrae Email & Phone Number

New York, New York, United States

• Conduct thorough analysis of security events and incidents using QRadar, ensuring timely identification and response to potential security breaches to safeguard organizational assets.• Investigate all network security violations, including Cross-Domain and Non-Disclosure of Classified Information violations, promptly reporting findings to leadership for tracking and remediation.• Execute proficient information assurance practices, encompassing systems hardening, validation, and the creation of comprehensive security documentation.• Support customer security requirements by actively participating in tasks such as reviewing, monitoring, conducting vulnerability assessments, and validating networks.• Spearhead the execution of vulnerability scans and facilitate the application of security patches as required for maintaining a robust security posture.• Assist in the maintenance and management of Certification and Accreditation artifacts, adhering to Risk Management Framework (RMF) requirements for CCRI.• Provide clear DoD policy guidance to address complacency issues and recommend security countermeasures.• Manage system Plan of Action & Milestones (POA&M), including offering guidance on remediation efforts to enhance system security.• Deliver cybersecurity recommendations to the team based on significant threats and vulnerabilities, actively collaborating with stakeholders to resolve computer security incidents and ensure vulnerability compliance.• Communicate and collaborate effectively with both technical and non-technical teams/business units, fostering a cohesive approach to cybersecurity.• Conduct ongoing research on Information Security-related topics, staying abreast of the latest developments in the field.• Apply service-oriented security architecture principles to uphold the organization's confidentiality, integrity, and availability objectives.

Honolulu, Hawaii, United States

• Executed vulnerability scans and apply security patches as necessary to uphold robust cybersecurity measures.•Assisted in the maintenance and preservation of Certification and Accreditation artifacts and documentation for CCRI, adhering to Risk Management Framework (RMF) requirements.• Provided policy guidance to the Department of Defense (DoD) to address complacency issues and implement security countermeasures.• Managed system Plan of Action & Milestones (POA&M), offering guidance on remediation efforts for enhanced system security.• Delivered cybersecurity recommendations to the team based on significant threats and vulnerabilities, collaborating with stakeholders to resolve computer security incidents and ensure compliance with vulnerability requirements.• Effectively communicated and collaborated with both technical and non-technical teams/business units to foster a cohesive approach to cybersecurity.• Conducted continuous research on Information Security-related topics to stay informed about the latest developments in the field.• Conducted thorough analysis of security events and incidents utilizing QRadar, ensuring timely identification and response to potential security breaches for the protection of organizational assets.

Camp Arifjan, Kuwait

• Conducted maintenance on supporting documentations for the Certification & Accreditation process using eMASS, streamlining the transition of outdated DIACAP reports into the new RMF format.• Implemented security policies on applications interfacing with each other, aligning with system security objectives.• Updated and maintained documentation (policies, procedures, and artifacts) in accordance with RMF standards.• Demonstrated proficiency in deploying and managing Splunk, utilizing its robust features to streamline log analysis, monitor system performance, and contribute to the organization's cybersecurity posture through effective detection and mitigation of security incidents.• Performed continuous monitoring and tracking of Plan of Action & Milestones (POA&M).• Ensureed the execution of cybersecurity vulnerability scans and application of security patches as required.• Provided valuable input to the Risk Management Framework process activities and related documentation, including system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials.

Rosslyn, Virginia

• Conducted maintenance on supporting documentation for the Certification & Accreditation process, leveraging eMASS to automate the migration of outdated DIACAP reports into the new RMF format.• Offered Information Assurance and IT Security support, contributing to LAN/WAN design, system security analysis, secured communications systems, and conducted risk and vulnerability assessments for the Department of State.• Supported vulnerability and compliance assessments, utilizing Tenable Nessus for scanning purposes.• Utilized Active Directory to ensure proper Group Share/Permissions.• Applied NIST 800-53, FISMA, FISCAM, and DISA security templates for comprehensive security measures.• Reviewed IAVAs identified during vulnerability scanning and implements patch remediation.• Generated Plan of Action & Milestones (POA&M) for critical vulnerabilities or network configurations that cannot be completed within a reasonable time.• Delivered detailed briefings to both technical and non-technical audiences on various security threats, risks, and vulnerabilities.• Resolved security findings discovered on both unclassified and classified network devices and operating systems.

Baghdad, Iraq

• Assist in the maintenance and upkeep of Certification and Accreditation artifacts and documentation for upcoming renewal of CAMP TAJIs network ATO using the new Risk Management Framework (RMF) requirements.• Conducts weekly vulnerability scanning & security compliance tests utilizing ACAS to remediate vulnerabilities to an acceptable level of compliance.• Provides DoD policy and Army regulation guidance to address compliancy issues and security countermeasures. • Conducts vulnerability assessments/site inspections for users requesting new network services.• Utilize technical writing skills to draft EXSUMs (Executive Summaries) which illustrate findings of vulnerability assessments/site inspections. • Reviews IAVAs found during vulnerability scanning and provides patch remediation.• Creates POA&Ms for critical vulnerabilities and or network configurations that can’t be completed within a reasonable time.• Provides detailed briefs to both technical and non-technical audiences on various security threats, risks, and vulnerabilities. • Resolves security finding discovered on NIPR/SIPR network devices and OS.• Investigates all network security violations to include Cross-Domain and Non-Disclosure of Classified Information violations and reports them to leadership for tracking and remediation.

Orlando, Florida

• Responsible for ensuring that all switches in our AO were 802.1x compliant in order to adhere to RMF standards.• Utilization of 802.1x port based authentication to prevent unauthorized client devices from gaining access to the network.• Configure and maintain Cisco (3560/3750/3850) switches based on customer’s needs. This includes subnetting for the implementation of VoIP phones, computers, printers, and VTCs on their switch.• Provide Network/Cisco support to Lockheed Martin employees as necessary.• Provide technical guidance on current/future networking trends ensuring compliant systems.• Respond to troubleshoot and repair failures preventing customer access to critical network applications.• Weekly review of Syslog to ensure network health, prevent intrusion detection and forensic analysis. • Configuration and maintenance of local TACLANE encryption devices (KG-175D).• Use Cisco Unified Call Manager to configure and register 600+ Cisco IP phones. • Update network diagrams using Microsoft Visio to illustrate any changes on network topology.• Ensure that all digital systems are both configured correctly and able to communicate with each other using industrial Ethernet cable. • Maintain the LAN which includes daily monitoring for system failures, performing daily data backups and network performance tracking.• Chief maintainer of 110 Block Wiring Systems throughout the Lockheed Martin facility. • Diagnose wiring problems and resolve them.

Vilseck, Bavaria, Germany

• Used Microsoft Visio to illustrate equipment setup during the renewal of 11th Signal’s ATO. These documents were key during the initiation and planning phase of our Certification & Accreditation process.• Managed and trained small team of 3-5 IT Specialists working on the Command Post Node team. Our Command Post Node includes a set of switches and routers on both SIPR (Secure) and NIPR (Non-Secure) enclaves that are dedicated to providing network connectivity across the battlespace. • Main point of contact for over 650 users needing access to DoD networks; focused on training them on cyber security best practices and remotely analyzed any issues that arose.• Operated and maintained tactical LAN/WAN hosts of the Command Post Node. Ensuring each system is properly baselined to organizational standards using both high-touch and lite-touch deployment imaging tactics. • Served as the Helpdesk/System Administrator for Forward Operating Base Pasab while deployed to the Kandahar Province of Afghanistan during 2013 campaign. • Executed new user onboarding for about 400 users, focusing on proper data security procedures while maintaining a high level of Information Assurance throughout the Battalion. Provided efficient, up to-date and easy to understand trainings to ensure users maintained these high standards.• Administrator of boundary devices such as managed switches (Cisco 3650 series), routers (Cisco 2900 series) and servers (Windows Server 2008 & 2012); oversaw networking of the department digital architecture.

Bachelor'S Degree, Information Technology

Associate'S Degree, Information Technology