• Mr. Arose managed several projects and accomplished transitioning several of them from DCID 6/3 to ICD 503, and fulfilling security requirements. He applied his knowledge related to the certification and accreditation process. On many occasions there have been requirements to adjust for unplanned changes in projects to accommodate mission priorities.• Mr. Arose hosted and arranged meetings with the Sponsor and stakeholders to understand the scope and objectives of the project and its mission goals to ensure system integrity, availability, and confidentiality of data and communications. • Experienced with security vulnerability assessment tools (e.g., Nessus, WASSP, SECSCAN) and network scanning tools such as; Nessus and Nmap). Also used Remedy, and XACTA repository applications, and Visio to update network topology.• Identify, define and classify security risks, develop mitigation approaches and reduce security risk. Through early identification and the generation of appropriate documentation for dissemination to decision makers.• Conducting systems evaluations, security controls, assess security controls, reviews on documents make changes and recommendations to the System Requirement Test Matrix (SRTM), Continuous Monitoring Plan (CMP), Contingency Test Plan (CTP), System Security Plan (SSP), thus providing feedback on system security.• • Review the Development Test and Evaluation (DT&E-I/II) security tests, including penetration testing to ensure adherence to system security policies. Several testing sessions may be required for IATT or ATT w/POAM before system proceeds to ATO.

(05/2012-09/2012) Managing several DEA projects using security policies, standards, procedures, guidelines, and best practices from areas such as FISMA, NIST 800 series regulations.Experienced in incident detection, analysis, coordination, and response; auditing systems, database, and applications; vulnerability assessments and compliance monitoring. Experience in vulnerability assessments and incident response handling; working knowledge of computer hardware and various operating systems, applications, and databases.(06/2011-03/2012) While assigned to the sponsor agency as an Operations Specialist monitoring real-time traffic across networks consisting of several overseas operations facilities. Familiar with WireShark and its use to track and monitor addresses of various networks managing the communications center. Also received accreditation as a Data Transfer Officer (DTO) for transferring of digital media and relevant files and information.Participated in collaboration with various engineers and vendors to establish the guidelines and tools to develop an automation process. Through this collaboration team, Mr. Arose and his teammates reduced download time by 60% to dedicate needed resources to other missions.(07/2010-06/2011) When assigned to the government sponsor under BAH Mr. Arose utilized the Agile/SCRUM methodology to track and adjust the schedule accordingly or, reoriented based on completed work for the COTS/GOTS development lab. (08/2009-04/2010Acting in the role of a Project Integration Engineer Mr. Arose was responsible for planning, managing, coordinating, installation and upgrades of communications equipment for the East Asian country consulates/embassies supporting the Department of State.

Project manager/engineer overseeing a new network architecture installation and configuration on various secure network communications equipment for a government agency. Engineering design, documentation, and implementation of rack layouts. Using agency best practices and following security guidelines INFOSEC, according to government accreditation standards.Mr. Arose has had 7 years exposure working in Agile environments. He gathered the requirements and solutions which evolved through collaboration between self-organizing, cross-functional teams. He also participated in Scrum activities and projects. At the end of each sprint, Mr. Arose arranged for the stakeholders and team members meet to assess the progress of a project and plan its next steps.He facilitated team meetings using the Agile methodology to discuss project deadlines, milestones, and tracking expenditures, configurations of equipment. Obtained Data Transfer Officer (DTO) privileges for transferring of digital media and information for uploading and configuration of network appliances.Assisted VAT crew on system functionality and vulnerabilities testing of system, with favorable results in security architecture. I recommended put in place an ArcSight Continuous Monitoring for collecting, storing and analyze finding for Cyber threats.