Information Assurance Specialist Resume Example

· Researched requirements and initiated System Security Plan Certification & Accreditation for both local common controls and DarkStorm. Led team implementation, security testing, and validation of security requirements.

· Designed, developed and implemented continuous monitoring test and acceptance criteria for multiple upper level LANs. This included the architecture of the dashboards in Splunk and Security Center, artifact retention and reporting to enterprise oversight, and developed criteria for review and analysis of artifacts.

· Continue to maintain a working knowledge of applicable corporate and federal policies, executive orders and relevant federal requirements.

· Consistently applied CNSSI/NIST requirements to develop, design, test and implement training manuals, job aids and reference documents used as guides to answer common controls for all system security plans within the FIE.

· As part of the initial COOP team representing the FIE, applied appropriate federal and corporate guidelines to research, design, and develop security policies and establish the required documentation for the COOP program.

· Performed gap analysis on local configuration management process. Engineered, designed, developed, tested and led initial team to transition the ERA awarded SNL FIE C3MB team to transition the configuration management workflow and process to the enterprise level at DOE/IN.

· Working with key stakeholders, implemented a new security plan for the DarkStorm High Performance Computer network, and led the accreditation effort and integrated cyber security requirements and controls into the system, resulting in ATO.

· Represented FIE Cyber Security for Continuity of Operations efforts, in coordination with DOE, NNSA, and DOE/IN to develop, design, and implement COOP requirements and documentation at the enterprise level.

· Engineered tailored controls for specific NIST requirements on multiple FIE enterprise wide systems and networks, resulting in controls used in the local common controls inherited by all DOE/IN accredited systems within the FIE.

· Working with other DOE labs and OGA partners on accreditations and configuration management initiatives, resulting in the implementation of an enterprise configuration management process.

· Designed, developed, tested and implemented sanitization procedures for incident response to meet federal intelligence community requirements.

· Architected, tested and implemented periods processing procedures and processes at multiple classification levels to enable testing at multiple classification levels utilizing the same equipment.

· Perform gap analysis to develop and redesign the architecture of the electronic device process for devices entering SCIF locations, including prohibited technology mitigation analysis in coordination with technology engineers.

· Integrating new cyber security requirements and controls into existing upper level LAN networks and new standalone systems and LANs, to ensure continued compliance with CNSI/NIST controls, and as a remediation/mitigation of vulnerabilities.