Van Vaughn, Pmp, Cism, Ceh, Cpte Email & Phone Number

Washington, District Of Columbia, United States

As a Subject Matter Expert at the International Trade Administration (ITA) within the Department of Commerce, I offer specialized technical expertise to support various projects focused on enterprise compliance in international trade. My role involves applying cybersecurity principles to resolve intricate issues, generating critical deliverables, and steering the strategic planning and implementation of cybersecurity initiatives. I utilize these principles and methodologies to craft solutions that ensure the efficacy of our cybersecurity programs.My duties encompass preparing and delivering FISMA reports and presentations to the Chief Information Officer (CIO) and senior leadership, conducting interviews with organizational staff to identify distinct system attributes, and producing essential security documentation that aligns systems with specified security controls and protocols. I conduct assessments throughout the enterprise and communicate the findings of data calls to both technical and non-technical stakeholders, guaranteeing compliance with various cybersecurity directives from the Office of Management and Budget (OMB), Congress, and other regulatory bodies.Key aspects of my role include leading or supporting enterprise working groups, maintaining documentation, monitoring actions, researching and formulating recommendations for cybersecurity policies and practices, performing risk assessments, and offering guidance on mitigation strategies. Additionally, I engage in cybersecurity engineering tasks, provide technical counsel for enhancing business processes, and streamline processes within the program. I am also accountable for creating, revising, and finalizing various types of documentation and fulfilling other relevant responsibilities as required by the Department of Commerce.

Washington, District Of Columbia, United States

In my role at the U.S. Department of Commerce, the Office of the Secretary is to provide subject matter expertise in technical knowledge and analysis, supporting functional technical areas of various projects. I review the DOC Cybersecurity Strategy, FISMA, OMB, Binding Operational Directives (BOD), and FedRAMP. Applying principles, methods, and functional area knowledge, I address specific task requirements, developing solutions for complex problems. Additionally, I am responsible for planning, developing, finalizing, and reviewing key deliverables in cybersecurity programs.I conduct reviews of FISMA metrics and data sources, initiating the design of data visualizations for briefing materials. Analyzing data collected from various sources, I articulate results in detailed and high-level formats for a diverse group of internal and external stakeholders. My achievements include ensuring compliance by verifying systems adhere to FedRAMP, CISA, Executive Orders, and FISMA Executive metric reporting across the agency for all bureaus. I report directly to the Chief Information Officer (CIO).

Washington, District Of Columbia, United States

My role in the SecOPS is to support and develop a Security Operations capability for the National Telecommunications and Information Administration (NTIA). The SecOps Incident Response/Threat Hunter serves as an aggregate point of intelligence. This involves reviewing intelligence from internal and external sources, assessing if the NTIA environment is actively targeted. Prioritization of threat research and hunts is based on active campaigns and intelligence. The goal is to provide contextual intelligence to enhance analysts' capabilities by triaging alerts or responding to incidents. Tuning and enhancing the current technical SecOps solutions, including SIEM, EDR, Firewall, and others, are essential aspects of my responsibilities. I regularly make recommendations to augment or improve these solutions. Enabling pivoting on indicators is crucial to identifying additional impacted infrastructures. I also evaluate analysts' products in analysis and synthesis, aiming to improve the usage of the XSOAR Threat Intelligence Management module. Performing Threat Hunts beyond the current indicators of compromise (IoC) searches is a continuous effort, as is engaging in incident response functions throughout all phases of the IR cycle.Working knowledge of SIEM solutions and incident management solutions is fundamental. My technical understanding spans core cybersecurity technologies as well as emerging capabilities, supported by strong analytical and troubleshooting skills. Collaboration with ESOC and DHS CISA is ongoing, particularly regarding Executive Order OMB MS-21-31 focuses on improving the nation’s cybersecurity. The SecOps Incident Response/Threat Hunter utilizes the gathered intelligence and analysis to make informed recommendations to the NTIA CIO and SecOps. These recommendations aim to enhance and further develop the maturity, resilience, and overall functionality of the security operations capabilities for NTIA.

Washington, District Of Columbia, United States

My role with the U.S. Department of Commerce is to Manage the day-to-day Security Operation Center (SOC) operations and additional Incident Response activities. Supervise the SOC team, provide technical guidance, and interface with teams within DOC and other Government agencies as needed. Oversee all management activities related to SOC operations including client relations, staff management, training, and mentoring. Revise and develop processes to strengthen the Security Operations Framework, review policies, and highlight the challenges in managing SLAs. Regularly interact with senior leadership and agency technology leadership.

Washington, District Of Columbia, United States

My role with the U.S. Department of Commerce served as a technical authority, advisor/consultant to the Chief Information Security Officer and the Office of Cyber Security & IT Risk Management (OCRM) and other government agencies. Cyber Security SME authority to DOC currently supporting the Continuous Diagnostics and Mitigation (CDM) Program in all phases and implementing a common set of capabilities. Provide subject matter technical knowledge and analysis to support functional areas of projects. This includes resolving capability gaps, enhancing existing capabilities, introducing new capabilities, and strengthening overall cybersecurity posture. Key to the role is maintaining a strong work ethic and acting with a sense of urgency and purpose, balanced with strategic and day-to-day operational intent. Some of my duties include engaging with critical infrastructure cybersecurity stakeholders, providing technical support to enterprise-wide cyber defense technicians to resolve cyber incidents, and identifying and resolving infrastructure cybersecurity vulnerabilities. Lead multi-level working groups and serve as the responsible party for ensuring relationships with Bureaus across the Enterprise and support in collaboration with the Integrator DHS Cybersecurity and Infrastructure Security Agency (CISA) and the General Services Administration (GSA).

Washington, District Of Columbia, United States

My role with the U.S. Department of Commerce focused on leading the engineering, implementation, and maintenance of security tools, solutions, processes, and policies to ensure an acceptable level of security within the U.S. Department of Commerce, Office of the Secretary. Key to the role was maintaining a flexible approach and being detailed oriented while working in a dynamic environment with constantly changing priorities. Some of my duties included managing classified and unclassified intel and the 12 bureaus as Enterprise Security Operation Center, managing data center operations network, server, storage and database, information security engineering and maintenance, DOC operations, enterprise system monitoring and service management, vulnerability management and security incident prevention, reporting, and analysis.

Washington, District Of Columbia, United States

My role with the U.S. Department of State focused on establishing and providing senior leadership in the development of information systems security solutions that relates to network, cyber, security technologies, policies, plans, processes and procedures, tools and systems. Key to the role was maintaining a high degree of attention to detail and practicing good communication skills. Some of my duties included managing functional areas in security engineering by analyzing and evaluating systems and controls, design and implementation support by managing security infrastructure roadmap, configuration management and security architecture, and continuity of operations and disaster recovery through risk management, mitigating security vulnerabilities, developing reports and streamlining processes and procedures.

Santa Ana, Ca.

My role with Ingram Micro Inc focused on coordinating security efforts across business functions to develop and implement a global security strategy designed to provide a high level of security to the Company’s personnel and assets. Key to the role was practicing strong critical thinking and sound judgment skills. Some of my duties included managing the collection, analysis, evaluation, interpretation and dissemination of information identifying threats, managing the implementation of security policies and systems, conducting vulnerability assessments and incident response, performing data center migrations and decommissioning activities and managing the deployment and implementation of multiple security technologies.

Las Vegas, Nv.

My role with the U.S. Department of Energy focused on addressing future emerging threats while protecting the reliable flow of energy to citizens by improving energy infrastructure security. Key to the role was practicing effective communication and organizational skills. Some of my duties included participating in projects at the office of the National Nuclear Security Administration’s (NNSA) Information Assurance Response Center (IARC) for cybersecurity, energy security and emergency response, detecting exploitable vulnerabilities and malicious activities, solving complex security problems in a heterogeneous environment and developing security standards and best practices for the organization.

Bachelor Of Science - Bs, Cybersecurity And Information Assurance, 3.5 Gpa

NEW HORIZONS COMPUTERS LEARNING CENTER, Anaheim, CA ISACA Certified Information Security Manager (CISM) Project Management Professional.

Education record

Various Certification Comptia, Ms, Ec-Council And Miles2, Information Technology, With A Focus In Cyber Security And Informance Assurance