Anthony Nigro
Leader In Cybersecurity And Innovation
Corvallis,MT
Summary
I am an experienced Cybersecurity leader with more than 16 years experience in the IT industry with 12 years experience in Cyber Security and Information Assurance. Passionately and effectively led several teams developing, continuously enhancing and implementing strategic compliance and risk management policies and procedures. I have partnered with department, project and team stakeholders to refine business requirements and raise the importance of cybersecurity and risk management to the executive level, ensuring that the business mission was held to the highest standards. I have successfully worked with interdisciplinary teams to ensure that best practice standards and risk management methodologies were implemented and adhered to.
I have achieved multiple industry certifications including CISSP, CISM, GAWN, GRID, GCIH, C|EH, CSIS and CIOS. I am a strong information technology professional and graduate of University of Maryland Global Campus with a B.S. in Cyber Security Policy and Management with a minor in Small Business Administration, and currently nearing completion of a Masters in Information Technology Management with a focus on project management.
Overview
15
15
years of professional experience
9
9
years of post-secondary education
7
7
Certificates
Work History
Senior Information Systems Security Engineer
TMC Technologies
Pocatello, ID
2023.06 - Current
- Driving force for Accrediting 7 systems within DOJ under SP 800-53 R5 and FISMA guidelines
- Gathered and created artifacts, selected controls, and created necessary POA&M's
- Worked with system owners and system technical SMEs to implement security controls
- Worked with system technical SMEs to implement various STIG items to support control implementation
- Managed time efficiently in order to complete all tasks within deadlines.
- Strengthened communication skills through regular interactions with others.
- Provided professional services and support in a dynamic work environment.
- Skilled at working independently and collaboratively in a team environment.
Senior Data Scientist
TMG Consulting
Remote, MD
05.2022 - 10.2022
- Worked with stakeholders to develop roadmaps based on impact, effort and test coordination.
- Extracted and assessed data from applications to drive improvement of product development and business strategies and processes.
- Compiled, cleaned and manipulated data for proper handling.
- Conducted application rationalization assessments on applications within multiple geographic locations in order to align business interests with Army's Data25 Strategy
- Extracted and assessed data from applications to drive improvement of product development and business strategies and processes.
Senior Cybersecurity Engineer
The MIND Group
Remote, MD
12.2019 - 04.2022
- Directed in-house cyber security and risk management auditing program to detect flaws and weaknesses in Microsoft Azure Cloud environment with more than 18 production servers.
- Performed risk and vulnerability assessments and provided results and recommendations to senior management.
- Maintained company-wide compliance with federal government STIGs and DoD Risk Management Framework and NIST CSF
- Recommended improvements in security systems and procedures.
- Developed plans to safeguard computer files against modification, destruction or disclosure.
- Represented company's technical security interests to partners to provide bi-directional flow of technical information and best practices in information security.
- Provided consultation and technical services on all aspects of information security.
- Worked with business partners to balance requirements, security and risk reduction.
- Engaged business and technology stakeholders to gather goals and requirements.
- Applied leading theories and concepts to development, maintenance and implementation of information security standards, procedures and guidelines.
Cyber Security Team Lead
United States Marine Corps
Tampa, FL
08.2015 - 10.2020
- Drove DoD Risk Management Framework process for 6 separate systems; gaining ATO's, establishing and executing POA&M's and identifying and consolidating artifacts into cohesive RMF packages.
- Lead, organized and conducted global incident response efforts in support of Special Operations Command Global Enterprise Operations Center.
- Developed and maintained incident response protocols to mitigate damage and liability during security breaches.
- Reviewed violations of computer security procedures and developed mitigation plans
- Performed risk analyses to identify appropriate security countermeasures across Windows and Linux operating systems.
- Recommend improvements in security systems and procedures
- Designed and prepared technical reports, studies and related documentation
- Ensured compliance with policies and quality standards to maintain consistency in quality of services
- Conducted frequent security audits to identify potential problems related to physical security, staff safety, and asset protection.
- Recorded incident reports with detailed accounts of occurrences.
Information Systems Security Manager
United States Marine Corps
Honolulu, HI
08.2012 - 08.2015
- Received commendations for work relating to application of cybersecurity best practices to information system standards, directives and guidance for personnel, monitoring compliance across organization.
- Assessed security measures against government policies and regulations.
- Implemented company policies, technical procedures and standards for preserving integrity and security of data, reports and access
- Recommended architectural improvements, design solutions and integration solutions
- Managed firewall, network monitoring and server monitoring both on- and off-site
- Performed risk analyses to identify appropriate security countermeasures
- Assessed security measures against government policies and regulations to ensure compliance
- Monitored daily operations to ensure accuracy of regulations, terms and conditions as well as policies and procedures
- Ensured that systems were continuously updated and that vulnerabilities were immediately patched or mitigated to prevent security issues
- Recommend improvements in security systems and procedures
- Conducted security audits to identify vulnerabilities
- Trained 24 junior members of IT team regarding network security and troubleshooting of data circuits
Education
Master of Science - Information Technology Management
Western Governors University
Salt Lake City, UT 01.2022 - Current
Bachelor of Science - Cybersecurity Management And Policy
University of Maryland Global Campus
College Park, MD 11.2015 - 04.2020
Associate of Science - General Studies
University of Maryland Global Campus
Largo, MD 11.2015 - 07.2019
Skills
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Cybersecurity Best Practice Implementation
Risk Management
Security Operations
Oral and written communication
FISMA and FedRAMP Compliance
Stakeholder updates
NIST SP 800-53 and STIG Compliance
TS/SCI Security Clearance with Counter-Intelligence Polygraph
Developing Security Plans
Technology Planning
ISO/IEC 27001
Vendor Negotiations
Able To Travel
Software Development
Certification
Certified Information System Security Professional (CISSP)
Timeline
Senior Information Systems Security Engineer
TMC Technologies
2023.06 - Current
Senior Data Scientist
TMG Consulting
05.2022 - 10.2022
Master of Science - Information Technology Management
Western Governors University
01.2022 - Current
Certified Information Security Manager (CISM)
03-2020
Senior Cybersecurity Engineer
The MIND Group
12.2019 - 04.2022
SANS/GIAC Certification: GSEC
10-2019
SANS/GIAC Certification: GAWN
08-2019
Certified Information System Security Professional (CISSP)
08-2018
SANS/GIAC Certification: GCIH
03-2018
Certified Ethical Hacker (C|EH)
12-2017
Certified Network Defense Architect C|NDA
12-2017
Bachelor of Science - Cybersecurity Management And Policy
University of Maryland Global Campus
11.2015 - 04.2020
Associate of Science - General Studies
University of Maryland Global Campus
11.2015 - 07.2019
Cyber Security Team Lead
United States Marine Corps
08.2015 - 10.2020
Information Systems Security Manager
United States Marine Corps
08.2012 - 08.2015