ARDIS A. HINTON
Colorado Springs,CO
Summary
Cybersecurity and Information System Security Manager with deep experience in RMF, ATO package management, ACAS, EMASS, and continuous monitoring. Leads security documentation, vulnerability remediation, and audit readiness for federal systems while coordinating with technical teams and stakeholders to support secure operations and compliance.
Overview
1
1
Certification
28
28
years of professional experience
Work History
Information System Security Manager
Department of Homeland Security/TSA
Colorado Springs, Colorado
10.2023 - Current
- Directed TSA information systems security program under DHS compliance requirements.
- Managed FISMA and NIST RMF documentation for system authorization activities.
- Served as primary security liaison between TSA/DHS stakeholders and contractor technical teams, aligning vetting system operations with federal cybersecurity mandates.. • Authored and refined Security Assessment Plans (SAP) to ensure testing methodologies addressed unique operational risks of TSA vetting environments. • Led coordination of annual security reviews and independent assessments, achieving 100% compliance with DHS-mandated audit cycles. • Manage the intersection of privacy and security requirements, ensuring that vetting systems handle sensitive PII in accordance with DHS privacy impact assessments
Cybersecurity Engineer/Analyst
Odyssey Consulting
09.2021 - Current
- Acting Cybersecurity SME (Subject Matter Expert) for SSC/Program Office
- Managed system scans, including DISA STIG and ACAS document results, initiating corrective actions to enhance DOD cybersecurity capabilities.
- Managed sustainment cybersecurity engineers to maintain and monitor system ATO package.
- Manages system updates to address vulnerabilities and reduce security issues.
- Conducts system analysis and implementation to maintain and improve computer systems.
- Monitors compliance and filing requirements in conjunction with staff and management.
- Analyzed IT specifications to identify security risks, ensuring device compliance with established requirements.
Cybersecurity Analyst/Consultant
Global Information Technologies
08.2018 - 01.2023
- Performed network traffic analysis using raw packet data, network flow, IDS, and custom sensor output to detect and mitigate security threats.
- Conducted ACAS scans to identify vulnerabilities in enterprise system architecture.
- Developed incident remediation and prevention documentation to enhance incident response effectiveness.
- Performed Risk Management Framework (RMF) A&A responsibilities.
- Developed, improved, and implemented best practices for risk reduction across enterprise applications, systems, networks, and interfaces.
- Analyzed information and conducted troubleshooting to determine ideal solutions and provide recommendations to upper management.
- Produced monthly reports using advanced Excel spreadsheet functions.
- Utilized data visualization tools to effectively communicate business insights.
Cybersecurity Analyst III
Jacobs
Colorado Springs, CO
04.2021 - 09.2021
- Developed and maintained incident response protocols to minimize damage and liability during security breaches.
- Designed company-wide policies to bring operations in line with Center for Internet Security (CIS) standards.
- Developed, tested, and implemented security policies, plans and procedures for organizational protection.
- Recommended enhancements to security systems and procedures to strengthen overall security posture.
- Performed risk analyses to identify appropriate security countermeasures.
- Conducted security audits to pinpoint vulnerabilities and inform remediation efforts.
- Engineered, maintained, and repaired security systems and programmable logic controls.
Senior Training Specialist
USFALCON/HUSA
Camp Arifjan
12.2019 - 04.2021
- Instructed students in IT Fundamentals, Security+, CySA+, RMF, CASP+, and CEH.
- Developed courseware for accuracy, completeness, flow, balance, and clarity of understanding.
- Authored curriculum development products to enhance learning outcomes.
- Provided regular, accurate, and timely feedback to students and institutions to support organization retention initiatives.
- Encouraged student engagement in classroom activities. to actively participate in all aspects of the educational process.
Adjunct Instructor / Cybersecurity / Computer Forensics/ IT
Colorado Technical University
Colorado Springs, CO
01.2016 - 12.2020
- Provided instruction in assigned courses (including applicable laboratory or work that is integral to the courses) that aligns with CTUs curricula and outcomes, instructional modalities, course technologies, and faculty expectations.
- Developed and implemented a teaching strategy integrating technology to enhance student engagement and learning outcomes.
- Linked professional experience to CTUs Professional Learning Model by integrating real-world examples, enriching curriculum relevance.
- Introduced professional perspectives into courses, fostering awareness of industry trends and opportunities for students.
- Maintained accessibility for and provided timely responsiveness to students, academic/faculty leadership, and University staff by telephone, CTU e-mail, and other appropriate means of communication.
Cyber Security Analyst Engineer / Verification and Validation
Insight Global
06.2018 - 10.2019
- Secured Authorization to Operate (ATO) and Authorization to Connect (ATC) certifications for assigned DoD systems/enclaves/networks, ensuring compliance with federal standards.
- Conducted risk and vulnerability assessments of information systems to identify vulnerabilities, risks, and protection needs.
- Created and reviewed RMF documentation, including Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports, to support system compliance.
- Collaborated with team to develop actionable recommendations for transitioning policies and procedures to align with Risk Management Framework (RMF) standards.
- Ensured system compliance with NIST and DoD security requirements.
- Performed tasks related to Assessment & Authorization (A&A) within the Defense Health Agency.
Cybersecurity Analyst / Engineer
Aerotek
08.2017 - 05.2018
- Performed Risk Management Framework (RMF) A&A responsibilities.
- Performed cybersecurity vulnerability management.
- Reviewed and recommended updates to enhance program cybersecurity policies and plans.
- Performed security impact analysis on system.
- Evaluated and documented system progress on RMF compliance to inform stakeholders.
- Conducted and/or reported annual FISMA requirements and maintained records.
- Received and reviewed ACAS reports for each system and characterized risk.
- Developed and updated continuous monitoring plans to maintain robust system security.
Cybersecurity Analyst
Department Of the Air Force
Colorado Springs, CO
07.2011 - 08.2017
- Provided oversight and expertise in cybersecurity of all IT systems operated by GPS (Global Positioning Systems) to ensure CIA in order to minimize risk of unauthorized access, use, disclosure, disruption, modification or destruction of system of data.
- Developed cybersecurity policies, strategies, and tactical plans; ensured compliance with regulations, and supported modernization, system security, and disaster recovery efforts.
- Performed assessments of risks and compliance efforts, and identified, mitigated, and monitored cyber security threats.
- Monitored networks, systems, and applications to identify emerging technologies and threats, informing technology adoption based on evidence-based research.
- Managed cybersecurity compliance activities and automated workflow processes using Enterprise Mission Assurance Support Service (EMASS).
- Transitioned LADO/GPS System from DIACAP to RMF.
Senior Systems Engineer / Cybersecurity Engineer
L-3 Straits
07.2010 - 07.2011
- Consulted on design, development, implementation, and maintenance of enterprise cybersecurity-information assurance program and insider threat program, enhancing protection of data and information.
- Performed analysis of Cyber Threats, Attacks and Intrusions, Advanced Persistent Threats and Malware
- Delivered countermeasures and training to reduce risks associated with cyber criminal activities.
- Managed full motion video server for efficient data storage and video information dissemination.
- Maintained communication links connecting architectures directly to national databases and down-link stations.
Systems Engineer/Cybersecurity Analyst
ETI Professionals
06.2008 - 08.2010
- Conducted cybersecurity risk analysis, assessments, and continuous monitoring to identify and address vulnerabilities.
- Managed POA&M and developed targeted vulnerability mitigation strategies to enhance system security posture.
- Used data collected from variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for purposes of mitigating threats.
- Provided special cyber-security studies, surveys, and reviews of IT systems to ensure that appropriate safeguards exist to protect against perceived threats.
- Configured and maintained BCCS tactical servers as SQL subject matter expert, implementing VMware ESX 3.5, Java Web Server, Windows Web Server, BC, and Gal Sync to ensure operational readiness.
- Installed wireless systems for SIPR and NIPR networks, ensuring compliance with security protocols.
- Configuring Switch and Air Fortress utilizing AN-50 and AN-80 Antennas.
System Administrator / Software Engineer
Lockheed Martin
07.2003 - 08.2008
- Implemented, developed, and tested installation and updates of file, print, and application servers across all departments, enhancing system reliability.
- Handled all aspects of Web Logic administration tasks, including day-to-day site operations.
- Monitored and maintained system performance to ensure optimal operation., Installation, Configuration, Troubleshooting, Load Balancing, Clustering, Deploying Applications, Performance Tuning and Maintenance
- Trained and configured TBMCs (Theater Battle Management) Server Suite.
- Performed system testing and integration for Command-and-Control Suite, contributing to operational readiness.
- Maintained Help Desk Suite for Windows XP clients, Windows 2003 Server, and Solaris Client/Server.
Project Lead / Database Administrator
AT&T Broadband
04.1999 - 07.2003
- Planned, executed, and controlled assigned projects, ensuring work performed complied with contractual requirements.
- Managed team responsible for monitoring and controlling all production databases ensuring maximum systems availability.
- Managed team responsible for installing application patches and performing software upgrades.
- Developed baseline project plan and milestones, ensuring timely task completion.
- Managed 15 personnel responsible for 5e DMS switch management.
- Maintained and distributed quality metrics, enhancing deliverables and supporting technical and business risk assessments.
Education
MBA - Technology Management
Colorado Technical University
Colorado Springs, COBachelor of Science - Information and Systems Security
Colorado Technical University
Colorado Springs, COBachelor of Science - Information Systems Management
Colorado Technical University
Colorado Springs, COSkills
- FISMA compliance
- NIST documentation
- RMF authorization
- ATO management
- Risk mitigation
- Risk analysis
- Regulatory compliance
- Vulnerability assessment
- Vulnerability management
- Penetration testing
- Continuous monitoring
- Nessus/ACAS
- SCAP
- EMASS
- Linux
- HBSS
Personal Information
Title: Cybersecurity Engineer/ISSM/
Certification
- Advanced Security Certification (SecurityX ), formerly (CASP+) Exp. 08/2029 Certified Information Security Manager (CISM) Exp. 3 Jan 2029
Accomplishments
- 2018 Faculty of the Year Award Winner Colorado Technical University
- 2018 Black Engineer of the Year Award Winner Category: Technology STEM: CompTIA partner and certified Trainer
Timeline
Information System Security Manager
Department of Homeland Security/TSA
10.2023 - Current
Cybersecurity Engineer/Analyst
Odyssey Consulting
09.2021 - Current
Cybersecurity Analyst III
Jacobs
04.2021 - 09.2021
Senior Training Specialist
USFALCON/HUSA
12.2019 - 04.2021
Cybersecurity Analyst/Consultant
Global Information Technologies
08.2018 - 01.2023
Cyber Security Analyst Engineer / Verification and Validation
Insight Global
06.2018 - 10.2019
Cybersecurity Analyst / Engineer
Aerotek
08.2017 - 05.2018
Adjunct Instructor / Cybersecurity / Computer Forensics/ IT
Colorado Technical University
01.2016 - 12.2020
Cybersecurity Analyst
Department Of the Air Force
07.2011 - 08.2017
Senior Systems Engineer / Cybersecurity Engineer
L-3 Straits
07.2010 - 07.2011
Systems Engineer/Cybersecurity Analyst
ETI Professionals
06.2008 - 08.2010
System Administrator / Software Engineer
Lockheed Martin
07.2003 - 08.2008
Project Lead / Database Administrator
AT&T Broadband
04.1999 - 07.2003
MBA - Technology Management
Colorado Technical University
Bachelor of Science - Information and Systems Security
Colorado Technical University
Bachelor of Science - Information Systems Management
Colorado Technical University