LiveCareer-Resume

mobile information systems security engineer resume example with 5+ years of experience

Jessica
Claire
resumesample@example.com
(555) 432-1000,
Montgomery Street, San Francisco, CA 94105
:
Professional Summary

Highly motivated Cyber Security professional with passion for Security. Known for ability to build strong customer relationships to understand requirements and deliver value-added solutions. Certified in Security and Networking.

Skills
  • Vulnerability Assessment
  • STIGs
  • SCAP Compliance Checker
  • ACAS
  • RedHat Enterprise Linux
  • Windows Server 2008-2019
  • PowerShell
  • Risk Management Framework
  • HBSS
  • Radiant Mercury System (CDS)
  • Mobility (Cell Phone Apps)
  • Cloud services
  • Cloud Computing
  • Fortify
  • Now Secure
  • Software Development Life Cycle (SDLC)
  • Amazon Web Services
Education
ITT Technical Institute Saint Rose, LA, Expected in 06/2013 Associate of Science : Network Systems Administration - GPA :
Certifications
  • CompTIA Security+ CE Certified, March 2016
  • CompTIA Network+ CE Certified, January 2015
  • CompTIA A+ Certified, October 2014
  • Certified AWS Cloud Practitioner, June 2021
Work History
Asrc Federal Holding Company - Cyber Security Specialist
Anderson, AK, 11/2021 - Current
  • Validated and verified system security requirements definitions and analyzed system security designs.
  • Planned and oversaw configuration changes for security infrastructure platforms.
  • Provided consultation and technical services on all aspects of information security.
  • Conducted security audits to identify vulnerabilities.
  • Reviewed violations of computer security procedures and developed mitigation plans.
  • Performed risk analyses to identify appropriate security countermeasures.
  • Performed all duties of the Mobile Information Systems Security Engineer listed below.
Saic - Mobile Information Systems Security Engineer
Offutt Air Force Base, NE, 08/2019 - 11/2021
  • Ensure compliance with functional and cybersecurity standards, policies, and doctrine for 36+ mobile applications.
  • Support Mobility Program to deliver lightweight and secure mobile applications to their end users.
  • Provide Cyber Security guidance and documentation throughout the mobile app software development life-cycle.
  • Ensure completion of mobile app cyber related programs, projects, or tasks within estimated timeframes and budget constraints.
  • Provide ISSE support functions as stated in the RMF Process guide and Navy Testing Guidance for mobile apps and additional projects.
  • Utilize forensics, hacking, and pen testing techniques and tools to assess mobile application security.
  • Document and report mobile app vulnerability details.
  • Remain familiar with industry security and regulatory compliance standards such as NIST, NIAP, OWASP, CWE, CVSS, including Risk Management Framework (RMF).
  • Understand, document and present finding on the data risk profile of applications when in actual use.
  • Communicate security requirements and assessment results to both program management and developers.
  • Identify key strategies for remediation of vulnerabilities. Continuously monitor the state of the mobile security industry.
  • Perform STIG reviews of systems in support of RMF efforts.
  • System Administrative responsibilities for the Mobility and Software Assurance team within AWS and NRDE environments to include granting access, building, maintaining, securing servers and applications, developing processes.
Enterprise Information Services Inc. – U.S. Navy Spawar Atlantic - Assured Compliance Assessment Solution Administrator
City, STATE, 10/2018 - 08/2019
  • Performing vulnerability scans within ACAS (Assured Compliance Assessment Solution) Security Center.
  • Monitoring 200+ scans on a weekly basis to ensure a 100% success rate.
  • Uploading scan results to VRAM on a Bi-Weekly basis for Production and Test environments.
  • Reviewing vulnerabilities for systems within the Cyber Security AOR and reporting compliancy.
  • Configuring for publishing scan results to CMRS (Continuous Monitoring and Risk Scoring).
  • Performed upgrades to Nessus scanners on Windows and Red Hat Enterprise Linux systems.
  • Perform STIGs (Security Technical Implementation Guides) on Windows servers within the Cyber Security AOR.
  • Required to keep an 85% secure rating on STIGs in both Low and High side environments.
  • Lead Authorized DTA (Data Transfer Authority) responsible for transferring files from and to different environments.
  • Perform a weekly audit of the Radiant Mercury Cross Domain Solution System (CDS) to determine any suspicious activity.
  • Provide a weekly confirmation of Information Assurance Vulnerability Alerts (IAVM/IAVA) compliancy.
  • Create, maintain, and update Standard Operating Procedures (SOP) for DTA and ACAS.
  • Train newly designated team members on DTA and ACAS roles.
Enterprise Information Services Inc. – U.S. Navy Spawar Atlantic - Network Security Analyst
City, STATE, 10/2016 - 10/2018
  • Responsibilities included those performed as an Assured Compliance Assessment Solutions Administrator.
  • Monitored HBSS (Host Based Security System) virus databases on systems.
  • Required to maintain a less than 7-day variation.
  • Monitored RSD (Rogue System Detection) for any systems that did not have the HBSS Software Suite installed.
  • Submitted tickets to respective admins to install missing packages.
  • Managed WSUS (Windows Server Update Server/Services) including being the sole Point of Contact related to WSUS errors, installed all patches and performed all STIGs in association with WSUS.
  • Performed daily reports on DAT (virus database) file compliancy for HBSS, WSUS Synchronization Status, SPLUNK reported Failed logins, Unintended System Shutdowns, Number of SSH Connections made, Number of Hosts reporting.
  • Performed IP Management and delegation of available IP's to servers based on information provided in a request from ITSM (Ticketing System).
Company Name - Windows Systems Administrator
City, State, 04/2016 - 10/2016
  • Maintained 24/7 support for Windows systems in Classified and Unclassified environments through an "on-call" schedule.
  • Performed patching within designated maintenance windows for Operating System and 3rd party software upgrades.
  • Properly reported what patches or upgrades had been installed and when through an Excel spreadsheet.
  • Tested and ensured proper installation and functionality after patch implementation.
  • Troubleshot "production" and "test" outages and informed the Data Operations Center on who to contact for further assistance.
  • Completed tickets through Remedy (Ticket System) for requests ranging from Administrator Access to System Restarts.
  • Maintained restrictive access by removing users who no longer needed admin access.
  • Created installation and configuration SOP for SCAP (Security Content Automation Protocol) Scanning Utility.
  • Performed SCAP scans on servers and remediated any findings.
  • Maintained reports on work performed on a weekly basis.

By clicking Customize This Resume, you agree to our Terms of Use and Privacy Policy

Your data is safe with us

Any information uploaded, such as a resume, or input by the user is owned solely by the user, not LiveCareer. For further information, please visit our Terms of Use.

Resume Overview

School Attended

  • ITT Technical Institute

Job Titles Held:

  • Cyber Security Specialist
  • Mobile Information Systems Security Engineer
  • Assured Compliance Assessment Solution Administrator
  • Network Security Analyst
  • Windows Systems Administrator

Degrees

  • Associate of Science

By clicking Customize This Resume, you agree to our Terms of Use and Privacy Policy

*As seen in:As seen in: