Most recent work

Information Security Analyst with 10+ years of experience in project coordination, personnel and physical security, business processes and has now accepted the challenge to solve complex issues in cybersecurity and risk management. I specialize in the RMF process, vulnerability management, continuous monitoring, and implementing robust security controls to mitigate risk across diverse environments. Proven ability to ensure compliance with NIST, DISA, and DoD standards while driving secure system authorizations and process improvements through strategic planning and cross-functional collaboration. CERTIFICATIONS and ACCREDITATIONS: • CompTIA Security+ ce • Project Management Professional (PMP) – PMI • Professional Scrum Master™ (PSM I) – Scrum.org • CISSP - In progress • Certified Insider Threat – Proof Point • (TS/SCI) Clearance (Active) SKILLS & EXPERTISE: Risk Management & Compliance – RMF, NIST 800-53/37/60, FIPS 199, DISA STIGs, FISMA, FedRAMP, eMASS Vulnerability & Threat Management – ACAS/Tenable Nessus, Wireshark, SCAP, GPO Security Documentation & Authorization – SSP, POA&M, SAR, SAP, ATO submission Continuous Monitoring & Incident Response –Security Audits, Incident Response Processing Network Security & System Hardening – Identity and Account Management, Patch Management Cloud & SaaS Security – AWS, ServiceNow, Salesforce Application Programs Cybersecurity Frameworks & Standards – DoD, NIST, ICD, CNSSI 1253. SPECIALIZED EXPERIENCE: Defense Threat Reduction Agency | TekSynap, Fort Belvoir, VA Information Assurance Engineer (ISSO) | March 2025 – Present • Execute RMF Steps 1-3; collect system information as needed and select and implement security controls. • Support RMF Step 4; perform risk assessments and manage POA&M remediation based on SCA findings. • Analyze raw ACAS scans, categorize vulnerabilities, and manage created POA&Ms. • Analyze and review Security Technical Implementation Guides (STIGS) based on the identified configuration baseline. • Collaborate with IT staff to resolve vulnerabilities within DoD-defined parameter values. • Provide security recommendations based on documented organization artifacts and other Body of Evidence (BOE) • Ensure compliance with NIST SP 800-37 Rev 1 and NIST SP 800-53 Rev 4. National Ground Intelligence Center, Charlottesville, VA Information System Security Officer (ISSO) /Vulnerability Assessment Analyst | January 2024 – March 2025 • Implemented RMF security controls and security policies for SIPR, NIPR, and JWICS classified intelligence environments. • Conducted risk assessments and vulnerability analysis, ensuring continuous monitoring and security compliance with NIST 80053 and DoD policies. • Assisted in managing Authorization to Operate (ATO) processes, preparing and submitting security packages via eMASS to maintain system accreditation for Cloud Information Systems and the enclave. • Performed ACAS vulnerability scans review, DISA STIG reviews, and system hardening to reduce attack surface. • Developed and maintained cybersecurity documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&Ms. • Provided security guidance and best practices to systems engineers and system administrators in the creation of the concept of operations (ConOps), ensuring compliance with DoD and NIST cybersecurity requirements. • Continuous monitoring and the principal Point of Contact (POC) for the Army security awareness training program, Information System Identity, and account access control policies for over 2k Intelligence escalated and general users. • Assessed and recommended security tool implementations to enhance incident detection, response, and automation capabilities • Ensure that all end-of-life media, hardware, and software are correctly destroyed and documented, serving as the alternate custodian for the destructive media program manager. Federal Deposit Insurance Corporation, Washington, DC Information Technology Specialist (Application Platform) | September 2023 – January 2024 • Assessed and enhanced security for Salesforce SaaS applications and ServiceNow workflows, ensuring compliance with Zero Trust Architecture principles by gathering users onboarding access procedures. • Developed security remediation strategies and POA&Ms for nine mission-critical financial systems, addressing vulnerabilities and improving risk posture. • Assisted in conducting system security audits and continuous monitoring, validating the effectiveness of implemented security controls and documenting findings in a centralized database. • Performed tasks in a DecSecOps cross-functional environment along with technical systems engineers to execute patch management strategies, preventing security gaps and compliance violations early in the System Development Lifecycle (SDLC). • Reviewed and updated security configurations documentation to align with NIST 800-53, FISMA, and FedRAMP requirements.