Metrick Spann
Shaw AFB,SC
Summary
Current Secret Security Clearance
DoD 8570 IAT Level II Certified
Strong leadership skills
Twenty + years working with Dod IT and Cyber systems
Five years’ administrator experience with Red Hat Enterprise Linux
Six years managing ACAS (Assured Compliance Assessment Solution) and Tenable products (Deploying Tenable agents, Tenable Security Center, Nessus Manager, Tenable Network Monitor)
Vulnerability Management scanning and configuration
Familiar with building virtual servers using VMWare
Familiar with Microsoft Server and Active Directory service accounts)
STIG Compliance scanning
Five years Help Desk experience
Overview
8
8
years of professional experience
1
1
Certification
Work History
Vulnerability Management Engineer
CACI International Inc.
SHAW AIR FORCE BASE, SC
06.2021 - Current
- Scanning and vulnerability assessment of over 8000 enterprise assets (PCs, servers, networking equipment, VOIP phones, etc.)
- Build virtual machines for and configure Nessus scanners, Managers and ACAS servers (Tenable.SC) as needed
- Manage annual ACAS licensing for 18 ACAS servers and 18 Nessus Manager Servers
- Update and patch Nessus scanners and ACAS servers as new updates are available
- Utilize Red Hat Enterprise Linux command line for server maintenance, upgrades and building tasks
- Ensure weekly, monthly CMRS and DISA reports and dashboards are available and generate them on the spot as needed
- Assist remote sites with reporting and identifying vulnerabilities/Use BSM Remedy ticketing system to track work and research
- Review SIEM solutions for security events and logs when needed
- Implement various security measures on Nessus scanners, and other Tenable devices
- Create and manage user-created ACAS/LDAP scanning credentials for 144 total accounts
- Create, manage 8 total Tier I and 8 total Tier II network service accounts for credentialed scanning purposes
- Install, import and update McAfee/Trellix agent packages on every Tenable Server
- Developed strategic recommendations to optimize resource allocation and improve organizational efficiency
- Collaborated with cross-functional teams to implement process improvements aligned with mission objectives
Cyber Security Analyst
CACI International Inc.
Shaw AFB, SC
06.2018 - 06.2021
- Executed coordination and tracking of IAVA alerts via ACAS, ensuring accurate assessment of network scanning outcomes.
- Performed detailed analysis to detect vulnerabilities, ensuring robust network protection through weekly evaluations.
- Review, draft and report weekly AFCENT compliance to USCENTCOM and develop Plans, Objectives, Actions and Milestones (POAM’s).
- Update and maintain IAVA vulnerability data on USCENTCOM websites.
- Prepare signature documents, various notes and materials for AFCENT Authorizing Official weekly meeting
- Review POAM's sent from remote sites for accuracy and compliance.
- Draft, inspect, and present Enterprise POA&M's for AFCENT
- Track, document, and report security related events including, but not limited to, Discharge of Classified Information and Cross Domain Violations IAW CENTCOM/AFCENT policy
- Manage, create and maintain regular user and elevated accounts across AFCENT domain using ARS and ADUC (Active Directory Users & Computers)
- Support Government and contractor IT staff by moving FER’s, BER’S and other administrative documentation through the Remedy ticket system
- Investigate, monitor network activity, and parse alerts across AFCENT using intrusion detection/prevention analysis tools like Fidelis, LogRyhthm, Firepower and ArcSight Logger
- Executed and monitored site-led investigations addressing PII operational security and password violations identified through Fidelis tool.
- Provide abbreviated administrative Help Desk support to CACI and other contracted personnel
Education
High School Diploma -
S.D. Lee High School
Columbus05-1992
Skills
- Current Secret Security Clearance
- DoD 8570 IAT Level II Certified
- Strong leadership skills
- Twenty years working with DoD IT and Cyber systems
- Five years’ administrator experience with Red Hat Enterprise Linux
- Six years managing ACAS
- Managing Tenable products
- Vulnerability Management scanning
- Configuration
- Building virtual servers using VMWare
- Familiar with Microsoft Server
- Active Directory service accounts
- STIG Compliance scanning
- Five years Help Desk experience
Certification
- Certified Ethical Hacker
- CompTIA Security+
- CompTIA Network +
- CompTIA Linux +
- Microsoft Certified Solutions Associate
- ITIL Foundation ITSM v.3
Timeline
Vulnerability Management Engineer
CACI International Inc.
06.2021 - Current
Cyber Security Analyst
CACI International Inc.
06.2018 - 06.2021
High School Diploma -
S.D. Lee High School