Job Search Status
Open to workDesired start date: Flexible
Open To Work
Jon C. Guidry
Chula Vista,CA
Work Preference
Summary
Over 18 years of experience supporting DoD and federal systems, specializing in vulnerability management, RMF/ATO compliance, and secure IT infrastructure. Proficient in using ACAS (Tenable.sc, SecurityCenter, and Nessus Agents) to identify, analyze, and remediate vulnerabilities across enterprise networks. Strong background with DISA STIGs, eMASS, SCAP, HBSS/Trellix, and Zero Trust security initiatives.
Overview
18
18
years of professional experience
1
1
CompTIA Security+ CE
2
2
DoD 8570 IAT Level II / IAM Level I
Work History
Cybersecurity Engineer – Federal Systems
LEIDOS (formerly SAIC)
01.2023 - 01.2025
- Supported VA’s Zero Trust Architecture implementation in alignment with NIST SP 800-53 controls.
- Updated use case implementation plans for VA systems with the ZTA team.
- Collaborated with system owners, engineers, and program managers to evaluate maturity levels and capabilities.
- Ensured compliance with FISMA, FedRAMP, and DoD RMF requirements.
- Verified NIST SP 800-207 ZTA principles and CISA’s Zero Trust Maturity Model were applied on the VA systems.
- Proficient in eMASS for validating compliance artifacts and evidence of capabilities.
- Experienced with ZMap as a validation tool for verifying system capabilities.
Personnel Security Administrator / Acting Facility Security Officer - DoD/Federal Programs
01.2022 - 01.2023
- Oversaw clearance verifications, reinvestigations, CAC issuance and SAAR processing for federal system access via SIMS database
- Managed personnel security processes for classified and proprietary access, ensuring compliance with federal regulations.
- Administered security clearances, CAC issuance, and SIMS database compliance.
- Ensured adherence to security policies and background investigation processes (T1–T5R) via e-QIP.
- Completed and signed the security manager section of SAAR forms, ensuring compliance with security protocols.
- Served as the security expert and primary point of contact during project meetings and calls.
Security Engineer – DoD/Federal Programs
01.2010 - 01.2022
- Secured Tricare systems by implementing security controls in compliance with DoD STIGs, FISMA, and ACAS scan findings.
- Managed ATO documentation and POA&Ms, maintained system inventories, and conducted annual security reviews.
- Applied IAVM compliance updates, security patches, and system hardening to ensure compliance across network systems.
- Automated OS hardening for Windows/Linux with VB & batch scripts, reducing deployment time significantly.
- Conducted vulnerability scanning, remediation tracking, and compliance reporting for RMF and POA&Ms.
- Administered and operated ACAS (Nessus/Assured Compliance Assessment Solution) for vulnerability assessments and compliance validation.
- Partnered with ISSOs, administrators, and engineers to remediate ACAS findings, apply STIG checklists, and ensure compliance with DISA STIG and IAVM requirements.
- Analyzed scan results to identify critical/high-risk vulnerabilities and tracked mitigation through POA&Ms.
- Exported and correlated SCAP-compliant scan data into eMASS to support RMF accreditation and maintain system ATOs.
- Supported development and maintenance of Authorization to Operate (ATO) packages using eMASS, ensuring compliance with NIST SP 800-53, DoDI 8500.01, and FISMA requirements.
- Coordinated Certification & Accreditation (C&A) artifacts and POA&Ms in preparation for ATO approval.
- Generated ACAS compliance reports for leadership, ensuring systems met FISMA and DoD requirements.
- Drafted and maintained system security documentation, SOPs, TTPs, POA&Ms, and compliance reports supporting IA accreditation, cybersecurity audits, and governance reviews.
Systems Specialist II - DoD/Federal Program
SAIC
01.2007 - 01.2010
- Provided global IT connectivity and hardware support for DoD meteorology/oceanography (METOC) systems.
- Installed and configured NITES IV systems, applied IAVA updates, and patched critical vulnerabilities.
- Conducted network troubleshooting, diagnosed hardware/software failures, and resolved escalated Level 2/3 issues.
- Created and maintained SOPs, SSPs, POA&Ms, and security documentation for FISMA compliance.
- Implemented secure Windows Server configurations in accordance with DISA STIGs and vulnerability findings.
- Performed manual and automated compliance checks using IAVMs, ACAS, SCAP, and custom scripts.
- Supported vulnerability remediation, patch management, configuration hardening, and ATO maintenance.
Education
M.S. - Computer Information Technology
Coleman University
La Mesa, CAB.S. - Computer Information Science
Coleman University
La Mesa, CASkills
- ACAS (Tenablesc, SecurityCenter, Nessus Agents)
- Vulnerability Management & Remediation
- DISA STIGs & SCAP Compliance
- RMF (NIST SP 800-37/53) & ATO Documentation
- Windows & Linux Server Hardening
- EMASS (Enterprise Mission Assurance Support Service)
- HBSS (Host-Based Security System) / Trellix Endpoint
- VMware vSphere, Red Hat Enterprise Linux, Windows Server
Certification
- CompTIA Security+ CE
- DoD 8570 IAT Level II / IAM Level I Qualified
- CompTIA Network+
- CompTIA Server+
- CompTIA A+
- Citrix CCA
Clearance
- Public Trust (ADP IT-II, Tier 2, Moderate Risk)
- Adjudication for favorable E.O. 12968 Secret clearance given by DoD CAS on 5/4/2021
Timeline
Cybersecurity Engineer – Federal Systems
LEIDOS (formerly SAIC)
01.2023 - 01.2025
Personnel Security Administrator / Acting Facility Security Officer - DoD/Federal Programs
01.2022 - 01.2023
Security Engineer – DoD/Federal Programs
01.2010 - 01.2022
Systems Specialist II - DoD/Federal Program
SAIC
01.2007 - 01.2010
M.S. - Computer Information Technology
Coleman University
B.S. - Computer Information Science
Coleman University