Computer Sales Specialist Resume Example

• Completed professional development in risk management, risk mitigation, threat management and intrusion detection.
• Major in potential threats, attacks and vulnerabilities and they have established techniques in risk management, risk mitigation, threat management and intrusion detection.

• CLOUD DATA
• CLOUD SERVICES
• ACCRESS CONTROL
• CLOUD INFRASTRUCTURE
• Completed professional development in ARCHITECT CLOUDING AND DATA

• Major in Cybersecurity, Information Security, Software Security, Infrastructure Security
• Categorized information systems using FIPS 199 and NIST SP 800-60 Vol.II to determine the impact level as either Low, Moderate or High. Developed documentation outlining the system operating environment to include hardware configuration, software, and type of information processed.
  Completed Security Plan (SSP), Information System Contingency Plan (ISCP / CP), Disaster Recovery Plan (DRP), Risk Assessment (RA), Rules of Behavior, Privacy Impact Assessment (PIA), Privacy Threshold Assessment (PTA), and Plan of Action and Milestones (POA&M) Report.
  Assisted in providing guidance and support to the development of POA&M as well as validation testing of POA&Ms.
  Developed Security Assessment Plan (SAP) to initiate Security Assessment for low, moderate and high impact information systems.
  Responsible for completing a reauthorization on information systems and successfully received the Authorization to Operate (ATO).
  In conjunction with the System Owner, I prepared and assembled Authorization package including authorization letter and submitted to the Authorizing Official (AO) for Approval and granting of ATO
  Identified security findings from the vulnerability reports, mapped each finding to a NIST control and tracked findings as needed.

Cyber Security Analyst
Responsible for completing and organizing Security Authorization documents such as Systems Security Plan (SSP), Security Assessment Report (SAR), Risk Assessment Report (RAR) and Plan of Action and Milestones (POA&M).
Responsible for creating and updating System Security Plan, Contingency Plan, Contingency Plan Test, Risk Assessment Report, System Categorization, Privacy Threshold Assessment, Privacy Impact Analysis, Security Assessment Report, Security Impact Analysis, and the Security Risk Traceability Matrix.
Create detail remediation reports and recommendations for compliance and security improvements across systems based on constant changing threats.
Perform Vulnerability and Compliance scans analysis by mapping each finding / vulnerability to security controls identified in the NIST 800-53 Rev4.
Monitor information systems for vulnerabilities and threats including weak password settings, weak configuration settings and outdated security patches.
Perform and complete the Contingency Plan Testing (CPT), and ensured all points-of-contact were aware of their duties and responsibilities.
Reviews and update remediation strategies on POA&Ms in the organization's cyber security and asset management (CSAM) system.
Work with system administrators to resolve POA&Ms, gather artifacts and create mitigation memos, residual risk memos and corrective action plans to assist in the closure of the POA&M.

IFORMATION SYSTEM SECURITY ANALYST .
Categorized information systems using FIPS 199 and NIST SP 800-60 Vol.II to determine the impact level as either Low, Moderate or High.
Developed documentation outlining the system operating environment to include hardware configuration, software, and type of information processed.
Completed Security Plan (SSP), Information System Contingency Plan (ISCP / CP), Disaster Recovery Plan (DRP), Risk Assessment (RA), Rules of Behavior, Privacy Impact Assessment (PIA), Privacy Threshold Assessment (PTA), and Plan of Action and Milestones (POA&M) Report.
Assisted in providing guidance and support to the development of POA&M as well as validation testing of POA&Ms.
Developed Security Assessment Plan (SAP) to initiate Security Assessment for low, moderate and high impact information systems.
Responsible for completing a reauthorization on information systems and successfully received the Authorization to Operate (ATO).
In conjunction with the System Owner, I prepared and assembled Authorization package including authorization letter and submitted to the Authorizing Official (AO) for Approval and granting of ATO
Identified security findings from the vulnerability reports, mapped each finding to a NIST control and tracked findings as needed.