duties Performed
08/2011 - 6/2014, SAIC, Ft. Meade Maryland. Systems Engineer. Execute security assessments and support activities necessary to support the continued accreditation of the Global Command and Control System (GCCS) system. Perform security assessments against Operating system components using the Security Content Automation Protocol (SCAP) tools, and against Oracle databases within a Solaris environment. Assist the engineering team in the testing of anti-virus software, security patches and baseline software to support the GCCS system.
10/2008 – 08/2011 SAIC, Falls Church Virginia. Information Assurance Officer. Execute Information Assurance activities in support of the JIEEDO (Joint Improvised Explosive Device Defeat Organization) Enterprise Management System. (JEMS). The primary task on this project is to serve as the information Assurance Officer (IAO). Maintain the Plan of Actions and Milestones (POA&M) and coordinated mitigation activities with security and system administrators. Maintain and review security documentation and ensure that the certification and accreditation packages contain all required information. Perform security compliance assessments and vulnerability assessments. Track vulnerability information within the Vulnerability Management System (VMS) and coordinate and perform resolution activities alongside system engineer s. Prepare IA procedure documents. Secondary role is to serve as tier-1 help desk administrator.
SAIC (June 2008 to October 2008) Senior Information Assurance Analyst. Executed Information Assurance activities in support of the Joint Network Management System. (JNMS). These activities included performing security compliance assessments in the form of Security Readiness Reviews, performing vulnerability assessments in the form of network scans, and ensuring that vulnerability mitigations were recorded and tracked within the vulnerability assessment reports.
SAIC (June 2007 to June 2008) Information Assurance Analyst. Executed Information Assurance activities in support of the Net-Centric Enterprise Services (NCES) system. These activities included performing security compliance assessments in the form of Security Readiness Reviews, performing vulnerability assessments in the form of network scans, and ensuring that vulnerability mitigations were recorded and tracked within the Vulnerability Management System. Maintained and updated the Plan of Actions and Milestones (POA&M) and coordinated mitigation activities with security and system administrators. Evaluated the HBSS security software for feasibility of incorporation within the NCES system.
SAIC (December 2006 to July 2007) Systems Administrator. Performed system administrator duties, assist with calls to the DCTS help desk. Duties include performing system installation activities, IAVA compliance, and managing calls to the help desk.
SAIC (August 2006 to December 2006) System administrator. Assigned to the ACTD laboratory and performed lab management and system administration activities on Windows 2000, and UNIX workstations and servers. Maintained and operated the lab in accordance with lab policies and security guidelines. Coordinated lab demonstrations, maintained the equipment inventory, and enforced security policy. Coordinated network connectivity issues, performed hardware and software maintenance, and maintained compliance to security policy. Maintained IAVA compliance by performing vulnerability scans on the lab assets and executing the necessary mitigation procedures.
SAIC (December 2003 to August 2006) Network Security Engineer . Served as the Alternate Information Security Officer. Executed the activities necessary to obtain and support the certification and accreditation of the DISA NETCOP. Tracked the status of the accreditation, ensured the system was operated in compliance with the accreditation, coordinated with certifying officials in performing Security Test and evaluation activities. Maintained the Plan of Actions and Milestones (POA&M) and coordinated mitigation activities with security and system administrators. Maintained and reviewed security documentation and ensured that the certification and accreditation packages contained all required information. Tracked vulnerability information within the Vulnerability Management System (VMS) and coordinated resolution activities with security and system administrators.
SAIC (August 2003 - December 2003) Systems Engineer Executed the activities necessary to provide system administration support the NIPRNET Connection Approval Process (NIPRCAP). These activities included configuration maintenance on the NIPRCAP web and database servers, upgrading server and application software, monitoring and implementation of IAVA alerts and technical advisories, maintaining user accounts, and maintaining SOP documentation.
SAIC (September 2000 - August 2003) Information Security Engineer (Systems Engineer) Defined and executed the activities necessary for the completion of C&A process. These activities included systems planning and project management, testing systems for vulnerabilities and compliance with security requirements, benchmarking, and information engineering, which resulted in the interpretation of customer needs and security requirements into various types of security documentation (e.g., system security authorization agreements [SSAAs], contingency operations plans, configuration management plans, security incident response plans).
