Not Provided
Sierra Vista,AZ
Summary
Experienced Information System Security Officer with a strong background in Risk Management Framework and ensuring regulatory compliance. Over 10 years of expertise in cybersecurity and network operations, skilled in the Enterprise Mission Assurance Support Service (eMASS) to maintain confidentiality, integrity, and availability (CIA) of web applications and network security. Subject Matter Expert in system hardening and security compliance, successfully contributed to multiple programs, systems, and networks. Recognized for work ethics, team building and management skills, outstanding job performance, and positive attitude throughout career.
Overview
15
15
years of professional experience
1
1
Certification
Work History
Cyber Security Engineer
Agile Defense
Fort Huachuca, Arizona
12.2023 - Current
- Information System Security Officer (ISSO) for the U.S. Army NETCOM CIO G-6.
- Leads the Risk Management Framework (RMF) for multiple programs and enterprise applications hosted in the Army cloud.
- Evaluates the application’s security requirements against security controls, DoD regulations, and NIST Publications to establish CIA compliance.
- Expert in applying Government directives and collaborating with stakeholders to obtain and sustain the Assess and Authorize A&A Authority to Operate (ATO).
- Develops system security plans, conducts system categorization, and inheritance analysis within the eMASS record.
- Sustains cybersecurity artifacts, Ports Protocols and Services, and Architecture diagrams.
- Provides recommendations in implementing changes while enforcing DoD security policies.
- Ensures regulatory compliance of DoD standards and regulations within the information systems.
- Creates Plan of Action and Milestones for non-compliant controls.
- Develops incident response plans, implementation plans, risk assessments, system security plans, and policies.
- Conducts continuous monitoring for the application security controls IAW NIST and DoD policies.
- Tracks and maintains the DISA Security Technical Implementation Guidelines (STIGS), ACAS and BURP scans.
- Provides expert security guidance to system administrator and developers in Linux and Windows systems hardening.
Cyber Security Engineer
Empower AI NETCOM
Fort Huachuca, AZ
06.2021 - 12.2023
- Delivered direct Risk Management Framework (RMF) support to the NETCOM’s Voice and Data Unified Capabilities (UC) on classified networks.
- Performed technical assessment on network devices to ensure compliance with security controls, FISMA, and NIST standards.
- Experienced in STIGs, Network hardening and operations, system security, Cybersecurity direction, and Knowledge Management.
- Led the RMF, system, and network teams in improving the network’s security posture.
- Evaluated security controls and maintained accreditation documents within eMASS to sustain Authority to Operate and Continuous Monitoring.
- Evaluated and applied system upgrades to network devices in multiple local and remote sites.
- Developed Plans of Action and Milestones for non-compliant controls.
- Maintained UC’s eMASS record and security compliance by managing Information Assurance Vulnerability Alerts (IAVAs), STIGs, and ACAS scans.
- Secured and configured Cisco routers, Avaya, and Oracle Session Border Controllers, Local Session Controllers, Media Gateways, Call Managers, and Servers.
- Managed the Access Control Lists and firewall rules for a defense in-depth approach.
Application Developer
Agile Defense NETCOM
Fort Huachuca, Arizona
04.2020 - 05.2021
- Application Developer Team Leader for NETCOM’s G6.
- Spearheaded the security of the Global Electronic Approval Routing System (GEARS) and the Facility Equipment Management System (FEMS) applications in support of CIA.
- Integrated the CIA triad throughout the Software Development Life Cycle (SDLC).
- Led efforts to harden systems, test functionality, and secure the G6 applications for a strong cybersecurity posture in accordance with DoD policies and regulations.
- Analyzed change requests and coordinated tasks with back-end and Front-end developers to implement changes and solutions for the applications.
- Directed and collaborated with G-6 teams in creating and implementing incident response and management procedures.
- Managed teams and acted as a liaison between the government leads, information system owner, system administrators, and application development teams.
- Reached high levels of customer service by remaining proactive in the applications’ implementations and changes.
System-Network Engineer
IMRI-NETCOM Division
Fort Huachuca, Arizona
06.2017 - 03.2020
- Capability Engineer in support of the Network Enterprise Technology Command (NETCOM).
- Technical advisor for the RMF and security compliance teams for the NETCOM’s Enterprise Network Situational Intelligence systems (ENSI).
- Provided cyber operations awareness on network persistent threats in support of the NETCOM’s Fusion Center.
- Directed and provided comprehensive instructions on network security, network configuration changes, systems, and firewall rules within deployed systems.
- Assessed the cyber defense posture and provided cyber security status reports for the Regional Cyber Centers under the NETCOM.
- Provided technical guidance to deploy sensors across the Joint Management Network and the DoD Information Network’s (DoDIN) Top Level Architecture (TLA).
- Managed and applied the DISA STIGs on Linux systems under the Army Regional Cyber Centers.
- Monitored near-real-time network’s health, network traffic, and security violations on the DoDIN classified networks.
- Trained Fusion Center analysts in the use of network analyst tools and cybersecurity threats.
Network Administrator
ManTech Telecom Division
Fort Huachuca, AZ
11.2010 - 06.2017
- Network Subject Matter Expert for the Joint Interoperability Test Command (JITC).
- Managed networks for the JITC’s testbed and the Distributed Network Control Center.
- Supervised projects and developed communication nodes for multinational exercises.
- Configured networks at the core, distribution, and access layers.
- Managed encryption devices and key distribution devices while maintaining accountability of key distribution, records, and destruction.
- Responsible of Circuit Actions as manager in charge of planning, implementing, and maintaining Wide Area Networks, dedicated commercial lines, and DISA circuits.
- Managed and processed Request for Changes for multiple systems and networks through a detailed change management process.
- Supervised and sustained network’s health, network performance, security, STIGs, diagrams, and compliance documentation for DoD classified networks to the highest standards.
Cyber Security-Network Engineer
US Army Reserve
Fort Huachuca, AZ
11.2019 - Current
- Network Analyst and Network Operations supervisor responsible for reinforcing network protection and Defensive Cyber Operations under Army’s Western Cyber Protection Center and the Army’s Cyber Protection Brigade (CPB).
- Assesses networks, conducts network mapping, and monitors network performance using network taps, Wireshark, and NMap.
- Develops data collection plans and deploys cyber defenders tool kits to collect endpoint and network traffic for data analysis and network continuous monitoring.
- Familiar with Security Information and Event Management Systems (Splunk and Security Onion).
- Develops standard operating procedures on network configurations, and the use of cyber defense tools.
- Enforces and provides direction in the application of DoD regulations, information assurance, and security best practices for Army classified networks.
- Collaborates with cyberwarfare experts in threat modeling development.
- Analyzes Assurance Compliance Assessment Solution (ACAS) scans, DISA STIGs and security policies in support of the CIA triad.
Network Engineer
US Army Reserve
08.2010 - 11.2019
- Warrant Officer for Battalion and higher elements expert in network operations, tactical communication terminals and the Warfighter Information Network–Tactical (WIN-T).
- Project manager for network infrastructure, fiber optic, and twisted pair cable install projects.
- Performed Contracting Officer Representative (COR) for Central Command contracts.
- Managed teams of system and network administrators, cable installers, maintenance techs, and satellite terminal technicians supporting the Tactical Control Facility in Jordan.
- Secured the Central Command forward network and systems by providing security updates, Common Vulnerabilities and Exposures (CVE) management, and STIGs compliance.
- Improved network security, efficiency, and redundancy for local area networks and wide area networks.
- Built and validated Continuity of Operations Plans (COOP) for multiple high priority forward, tactical, and strategic sites.
Education
Bachelor of Applied Science - Network Management
University of Arizona
Tucson, AZ05.2019
Skills
- Network security
- Firewall management
- Operating system security
- Security auditing
- Compliance management
- Vulnerability assessment
- Patch management
- Security policy development
Personal Information
Title: Principal Information System Security Officer
Certification
- SAN Industrial Control Systems and Supervisory Control and Data Acquisition Course, 01/01/24
- Certified Information Systems Security Professional (CISSP) (ISC)2, 01/01/23
- The Army’s Cyber Protection Brigade’s Cyber Common Technical Core (CCTC), 01/01/22
- Assured Compliance Assessment Solution (ACAS), 01/01/17
- ITIL Foundation in IT Service Management, 01/01/16
- Security+ CE, 01/01/12
- Network+ CE, 01/01/10
Clearance
Active DoD Top Secret SCI
Timeline
Cyber Security Engineer
Agile Defense
12.2023 - Current
Cyber Security Engineer
Empower AI NETCOM
06.2021 - 12.2023
Application Developer
Agile Defense NETCOM
04.2020 - 05.2021
Cyber Security-Network Engineer
US Army Reserve
11.2019 - Current
System-Network Engineer
IMRI-NETCOM Division
06.2017 - 03.2020
Network Administrator
ManTech Telecom Division
11.2010 - 06.2017
Network Engineer
US Army Reserve
08.2010 - 11.2019
Bachelor of Applied Science - Network Management
University of Arizona
Similar Profiles
Laforest CannonLaforest Cannon
Telecommunications Technician at Agile DefenseTelecommunications Technician at Agile Defense
DARRAN JAMALL KELLEYDARRAN JAMALL KELLEY
Information Security Specialist at Agile DefenseInformation Security Specialist at Agile Defense
Jerel MayoJerel Mayo
Information System Security Officer – Remote at Agile DefenseInformation System Security Officer – Remote at Agile Defense
Tresca Schmidt-PaparoTresca Schmidt-Paparo
Caregiver at Via EleganteCaregiver at Via Elegante
Matthew SalinasMatthew Salinas
Escalation Specialist at ACTEscalation Specialist at ACT