Summary
Overview
Work History
Education
Skills
Certification
Timeline
Hi, I’m

Felix Che

CyberSecurity
Bowie,MD

Summary

4 Years of experience in cyber security. A highly driven, detail-oriented, and experienced IT Cybersecurity professional with thorough knowledge and understanding of FISMA and Risk Management Framework. Well experienced in monitoring, documenting ATO Package, remediating POAMs, Risk assessment. Proven record of evaluating system vulnerability to recommend security improvements and Audit Findings.

Overview

2
years of professional experience
1
Certification

Work History

NDepth Security

SECURITY CONTROL ASSESSOR
04.2023 - Current

Job overview

  • Schedule and Conduct Test Readiness Review meeting as part of security assessment and authorization (A&A) process.
  • Test cases with the security control assessment results as populated in RTM Using NIST 800-53A Rv4
  • Develop, review and updated security documentation including the System Security Plan, Configuration Management Plan, Contingency Plan, Contingency Plan Test Report
  • Prepare the security assessment report (SAR) for documenting the issues, findings, and recommendations from the security control assessment
  • Support the Information System Security Officer (ISSO)/System POCs during the Assessment and Authorization (A&A) process to ensure assigned systems have the proper Authorization to Operate (ATO) using the NIST SP 800-37 Risk Management Framework (RMF) guidance
  • Compiling security authorization packages documentation such as system security plan (SSP), security assessment report (SAR), plan of action and milestones (POA&M) and ATO letter that are required by the Federal Information Security Management Act (FISMA) and OMB compliance process
  • Review and analyze the automated scan results from 3 months back from NESSUS vulnerability scan results.
  • Work with tools in FedRAMP, Xacta and .
  • Use CISA STIG benchmark to harden system vulnerability posture.
  • Evaluated the effectiveness of system hardening measures, providing actionable feedback for continuous improvement efforts.
  • Assisted clients in achieving regulatory compliance through proper implementation of required security controls.
  • Recommended improvements in security policies and procedures, leading to enhanced protection against potential threats.
  • Evaluated and improved security controls by conducting thorough risk assessments.
  • Increased organizational compliance with industry standards such as NIST and ISO, by performing regular audits and reviews.
  • Identified potential attack vectors by simulating real-world threat scenarios during assessments.
  • Advised organizations on selecting suitable automated tools for monitoring network activity and detecting potential intrusions, contributing to a more robust security posture.
  • Maintained up-to-date knowledge of emerging cyber threats, ensuring relevant expertise in assessing security risks.
  • Performed risk analyses to identify appropriate security countermeasures.
  • Conducted security audits to identify vulnerabilities.
  • Collaborated with IT teams to address identified security weaknesses, fostering a proactive approach to risk management.

Education

Olabisi Onabanjo University
Ago-Iwoye Ogun State, Nigeria

Bachelor of Science from Geography (Ed).

University Overview

Baltimore City Community College
Baltimore, Md

CompTIA A
2017

University Overview

Crest Consulting Group: Cybersecurity, Governance and Security

Skills

  • Team leadership
  • Great troubleshooting skills
  • Strong verbal communication
  • Interpersonal and written communication
  • Extremely organized
  • Self-motivated
  • Vulnerability tools both for web and Network using Nessus, Webinspect and NMAP
  • Active Directory (AD) and SharePoint
  • SIEM(Splunk) Analyser
  • Skilled in A, basic networking, basic Linux fundamentals, windows server 2016, windows OS
  • Strong understanding of RMF and NIST publications 800-60, 18, 53, 53A4, 37,137 FIPS 199/200 publications
  • Firewall/IDS/IPS
  • Microsoft Hyper-V Server

Certification

CompTIA Security+ CE

Certified Authorization Professional (CAP) – certification in progress.

Timeline

SECURITY CONTROL ASSESSOR
NDepth Security
04.2023 - Current
Olabisi Onabanjo University
Bachelor of Science from Geography (Ed).
Baltimore City Community College
CompTIA A
Felix CheCyberSecurity