Michael Onuskanich
Kettering,OH
Summary
Accomplished Cyber Security professional with over 17 years of experience seeking a challenging position that fosters growth and deepens expertise in the field. Thrives in a collaborative environment, adept at managing multiple projects simultaneously to ensure successful outcomes. Proven track record in conducting specialized security assessments leading to system authorizations within the Department of War (DoW). Eager to leverage technical skills and contribute to innovative projects alongside a dynamic team.
Overview
25
25
years of professional experience
1
1
Certification
Work History
Cyber Compliance & Risk Management Sr
Booz Allen Hamilton
08.2018 - Current
- Cyber Compliance & Risk Management Sr - Enterprise Security Architect – Air Force Material Command (AFMC) - WPAFB
- Ensure that the stakeholder security requirements necessary to protect the organization’s mission and business processes are adequately addressed in all aspects of the Logistics Reference Architecture including reference models and supporting missions and business processes.
- Document and address AFMC’s information security, cyber security architecture, and systems security engineering requirements throughout the acquisition life cycle.
- Analyze systems engineering principles to develop the AFMC Logistics Reference architecture.
- Ensure that acquired or developed system(s) and architecture(s) are consistent with AFMC’s cyber security architecture guidelines.
- Utilize architecture modeling to identify and prioritize critical business functions.
- Provide input on security requirements to be included in statements of work and other appropriate procurement documents.
- Provide strategic input to the Risk Management Framework process activities and related documentation.
- Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment.
- Evaluate security architectures and designs to determine the adequacy proposed in response to requirements contained in acquisition documentation.
- Determine and implement the protection requirements (i.e., security controls) for the information system(s) and network(s) within the AFMC Logistics Reference Architecture.
- Document and update as necessary all definition and architecture activities.
- Translate proposed system design capabilities into technical positions.
- Implement and assess the security management during the life-cycle development process
- Worked effectively in fast-paced environments.
- Resolved problems, improved operations and provided exceptional service.
- Excellent communication skills, both verbal and written.
- Developed and maintained courteous and effective working relationships.
- Demonstrated creativity and resourcefulness through the development of innovative solutions.
- Used strong analytical and problem-solving skills to develop effective solutions for challenging situations.
- Proven ability to learn quickly and adapt to new situations.
- Organized and detail-oriented with a strong work ethic.
Information System Security Manager (ISSM)
HumanIT
05.2017 - 08.2018
- Develop, implement, oversee, and maintain a system-level cyber security program that includes cyber security architecture, engineering principles, objectives and policies, cyber security personnel, and cyber security processes and procedures for an Air Force acquisition system.
- Work with developers on strategy for moving forward on the transition from DIACAP to RMF.
- Support program management in moving applications to a cloud-based architecture in a public cloud.
- Maintain a repository for all system-level cyber security-related documentation.
- Monitor compliance with cyber security policy, as appropriate, and reviews the results of such testing and evaluation.
- Senior Subject Matter Expert (SME) working directly with Air Force Space Command in moving system authorization forward to prevent delay in system deployment.
- Inform organizational members of cyber threats, mitigation techniques and procedures.
- Report cyber security incidents suspected malicious behavior or newfound vulnerabilities.
- Initiate requests for temporary and permanent exceptions, cyber security deviations, and waivers.
- Assemble the security authorization package, consisting of the updated security plan, the SAR, and the POA&M, as well as the appropriate documentation for any security controls that are being satisfied through inheritance.
- Ensure system readiness by conducting cyber security inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
- Periodically assess the quality of security controls implementation against performance indicators.
- Supervised team of three security personnel during shift.
- Supervised team of four security personnel during shift.
- Supervised team of four security personnel during shift.
Security Engineer
TEKSystems
03.2017 - 05.2017
- Provided short-term contract services for surge support during contract bridge.
- Assist in developing security documentation for USCENTCOM HQ systems.
- Review and updated POA&Ms, working with system owners on developing remediation and mitigation strategies.
- Conduct annual security reviews.
- Maintain system status in eMASS.
- Contract
Cyber Security Analyst
Lunarline, Inc.
05.2009 - 02.2017
- Prepare security documentation in accordance with defense, federal and national requirements.
- Responsible for leading security assessments for a multitude of various types of systems and clients, to include Platform IT (PIT) systems, medical systems, enterprise systems and accounting systems.
- Research and analyze security vulnerabilities to determine vulnerability mitigation strategies and complete risk assessments to communicate to senior executives’ recommendations for remediation and/or mitigation.
- Develop System Security documentation in support of multiple Department of Defense and Federal information systems.
- Develop RMF artifacts for DoD information systems, to include System Security Plans, Configuration Management Plans, Security CONOPS, Continuous Monitoring Strategies, Implementation Plans, Risk Assessments and Contingency Plans.
- Conduct Independent test & evaluation (T&E) on DoD and commercial facilities and systems, provided executive level reports on security posture and documented recommended remediation actions.
- Site Security Manager and Construction Project Manager for a Sensitive Compartmented Information Facility (SCIF) development and implementation.
- Facility Security Officer responsible for implementing physical security, monitoring alarms, recording and responding to security related events.
- Conduct training for staff on insider threats in accordance with Depart of Defense (DoD) Instructions, Federal Government Regulation and Industry Best Practices, to include technical security, physical security and open-sources such as social media.
- Lead project manager meetings with senior level individuals.
- Conducted security audits to identify vulnerabilities.
Deputy
Pinellas Sheriff's Office
03.2006 - 06.2009
- Serve in a highly responsible and visible capacity in the protection of life and property; performs law enforcement and crime prevention work by patrolling assigned areas, answering calls for service, and investigating crimes.
- Work under minimum supervision within a framework of established procedures and performed a variety of law enforcement duties with only occasional instruction, assistance and supervision.
- Thorough knowledge of departmental procedures and the ability to choose among a variety of alternatives in solving emergency and routine incidents.
- Assist in the supervision and training of new, less experienced law enforcement employees.
- Conduct arrests as necessary; interviews victims, complainants, and witnesses; interrogates suspects; gathers and preserves evidence; testifies and presents evidence in court.
- Contact and cooperated with other law enforcement agencies in matters relating to the investigation of crimes and the apprehension of offenders.
- Prepare reports of arrests made, investigations conducted, and unusual incidents observed.
- Serve warrants, subpoenas, and civil documents.
- Assist local fire departments within the County in traffic control and fire rescue.
- Administer first aid in emergency situations. Assists in County search and rescue operations over a wide area, sometimes involving rugged terrain and difficult weather conditions.
- Provided testimony in court proceedings.
- Responded to emergency calls to provide assistance to citizens in need.
Protective Service Agent
Joint Security Element, U.S. Central Command
08.2000 - 08.2005
- Extensive experience in close-personal protection, private security and law enforcement.
- Subject Matter Expert (SME) in anti-terrorism and force protection.
- Close Personal Protection for United States Central Command Military Leaders, Executives, Dignitaries, VIP’s, and High Value Individuals.
- Brief and direct senior level officials.
- Provide advance team operations in over 25 countries which required individual travel to U.S. Centcom AOR locations prior to VIPs and conducted complete surveillance, physical security sweeps and advanced security coordination.
- Develop and documented contingency plans in the event of an emergency evacuation.
- Provide protective details through the country embassy’s or other such local security organizations.
- Provide safe and secure ground and air transportation for military and civilian VIPs throughout the world.
- Prepare appropriate documentation in support of position.
- Conduct physical vulnerability and risk analysis.
- Support site operations through assignments to augment the local uniformed patrol.
- Conduct DoD customs enforcement duties with direction from The U.S. Department of Agriculture
- Detected, investigated and reported hazardous workplace incidents and issues.
- Responded quickly to emergency situations to assess and deflect issues.
- Conducted training sessions for new security personnel to facilitate compliance with security protocols.
- Recorded observations and occurrences and interviewed witnesses to complete and submit incident report.
- Investigated suspicious activities and persons to maintain security of premises.
Education
Bachelors Science - Cyber Security
Rasmussen University
New Port Richey, FL12.2010
Skills
- Remote work readiness
- Maintains poise during challenging circumstances
- Issue management
- Proficient in computer applications
- Team leadership
- Problem-solving skills
- Self-Directed
- Effective written communication
- Problem-solving skills
- Team collaboration skills
Certification
- Active Secret Security Clearance-SSBI
- EACOE Enterprise Architect Certification-2018
- Certified in Governance, Risk, and Compliance (CGRC) IAM Level II -2017
- Certified CMMI Associate 2017
- NSA/CNSS Information Systems Security (INFOSEC) Professionals, NSTISSI No. 4011
- NSTISSI No. 4012
- CompTIA Security + Certified 2010
Timeline
Cyber Compliance & Risk Management Sr
Booz Allen Hamilton
08.2018 - Current
Information System Security Manager (ISSM)
HumanIT
05.2017 - 08.2018
Security Engineer
TEKSystems
03.2017 - 05.2017
Cyber Security Analyst
Lunarline, Inc.
05.2009 - 02.2017
Deputy
Pinellas Sheriff's Office
03.2006 - 06.2009
Protective Service Agent
Joint Security Element, U.S. Central Command
08.2000 - 08.2005
Bachelors Science - Cyber Security
Rasmussen University