• Cyber Security Engineer with 6+ Years experience in Implementation, Administration, Operation and Troubleshooting of enterprise data networks• Experience in planning, developing, implementing, monitoring and updating security programs, and advanced technical information security solutions, and sound knowledge in SOX and PCI compliance requirements and understanding of NIST and ISO standards• Experience as a Splunk Engineer configuring, implementing and supporting Splunk Server Infrastructure across Windows, UNIX and Linux environments• Configure, maintain and design network security solutions including firewalls (Checkpoint, Cisco ASA and Fortinet), IDS/IPS (Cisco, Checkpoint and Sourcefire), VPN, ACLs, Web Proxy, etc.• Hands on experience on Operations and management of Aruba based wireless network providing multiple SSID platform for DoD users Hands on experience on Web Application Firewalls and attack mitigation techniques• Work closely with clients Information Assurance analysts to oversee the preparation of a comprehensive and executive and Accreditation (C&A) packages for approval of an Authorization to Operate (ATO); generate, review and update System Security Plan (SSP) against NIST and NIST requirements• Facilitate implementations of information security policies, account security policies and standards for logical and physical security and Perform Risk Assessment, Gap analysis & create Risk Mitigation plan• Good experience to provide remediation consultation to organizations and system owners, ensuring vulnerabilities are remediated IAW DISA/NIST and Cyber Threat Intelligence research• Modernize assessment tools by researching emerging technologies and outlining their procurement to increase productivity and effectiveness• Having good understanding and Knowledge for implementation for ISO 27001, NIST 800 - series, DIACAP, and FISMA guidance/governance• Strong knowledge under Imperva web application firewall for monitoring for in-depth analysis of attacks and SIEM tools such as Splunk, HP ArcSight for analysis and log monitoring.• Led an effort to create a new process in filtering and manage IPS events by automating the process and streamline Security Operation Center (SOC) triage efforts.
