Information System Security Officer Resume Samples

Description :

1. Reviewed and analyzed proxy exception requests for DHS networks using web resources DHS policies as guidelines.
2. Managed and tracked multiple requests and incidents using a Remedy web-based ticketing system.
3. Acted as Remedy Change Manager for DHS HQ Information Assurance team.
4. Managed and tracked all Remedy tickets within DHS HQ Information Assurance ticket queue via Excel workbook, which created.
5. Reviewed and provided approval recommendations for all new Privileged Account Requests (PARs) for the DHS HQ component.
6. Provided Federal Management with weekly and monthly PAR reports.
7. Reviewed and updated multiple Change Requests (CRs) across various DHS networks.
8. Created Information Security Vulnerability Management (ISVM) surveys within a SharePoint portal and track all responses via SharePoint from acknowledgment through compliance.

Experience

2-5 Years

Level

Junior

Education

B.S. In Criminal Justice

Description :

1. Managed information security for the $850M Air Force Distributive Common Ground Segment (AF DCGS) information systems composed of multiple classified information systems such as JWICS, NSA, SIPR, CENTRIX, and USBICES.
2. Revamped information security programs and procedures for Air Force Distributed Common Ground Systems (AF DCGS) as new requirements were established.
3. Provided Information Assurance (IA) support for Certification and Accreditation (C&A) activities ensuring information systems have the ability to operate.
4. Revitalized standardized account management processes and procedures vetting user access to AF DCGS network enterprise more efficiently.
5. Provided security recommendations to ensure new network and system requirements meet established NSA, DIA, and Air Force Directives.
6. Established and developed procedures for sanitization and disposition of DoD sensitive automated information system components and media-generated within secure compartmented information facilities (SCIF's).
7. Initiated contact with internal and external sites for tracking, managing and remediating security incidents.

Experience

10+ Years

Level

Senior

Education

Information System

Description :

1. Prepared, maintained and implemented an SOP that accurately reflects the installation and security provisions.
2. Delegated Public Key Infrastructure (PKI) Trusted Agent for the Network Enterprise Center Regional (NEC-R).
3. Created elevated SIPR and NIPR accounts daily.
4. Approved and verified Virtual Private Network (VPN) accounts daily.
5. Ensured that each organization has in place and maintains a Tenant Security Plan.
6. Responsible for maintaining the documentation of the certification and accreditation activities and direct technical and coordination activities to prepare the system Security Plans and update the Plan of Actions and Milestones (POA&M).
7. Ensured that unauthorized personnel is not granted use of, or access to, and Information System.
8. Communicated and enforced security policies, procedures, and safeguards for all systems and staff.

Experience

7-10 Years

Level

Management

Education

Information Systems

Description :

1. Developed and maintained a formal Information Systems Security Program.
2. Implemented and enforced IS security policies.
3. Reviewed subordinate units System Security Plans and endorse those found to be acceptable.
4. Oversaw all Information Assurance Officers (IAOs) ensure that they are following established information security policies and procedures.
5. Arranged necessary technical and security training for 25+ IAOs to carry out duties in their respective units.
6. Ensured the development of system certification documentation by reviewing and endorsing such documentation and recommending action by the Designated Approval Authority.
7. Approved procedures are in place for clearing, purging, declassifying, and releasing system memory, media, and output.
8. Coordinated and conducted Information Systems security inspections, tests, and reviews.

Experience

2-5 Years

Level

Junior

Education

Technology

Description :

1. Conducted investigations of security violations and breaches and recommends solutions.
2. Prepared reports on security violations and breaches as necessary and provides analysis summary to management.
3. Provided Enterprise Security Engineering and Information Systems Security expertise and coordination throughout a DHS AIS system development lifecycle.
4. Developed and refined Standard Operating Procedures (SOPs) that reflect the security operations of the technical environment.
5. Exercised Information Assurance (IA) control over development changes or requests for improvements to system configuration and system security plan to align with the Department of Homeland Security Sensitive Systems Policy Directive 4300A for General Support Systems.
6. Managed and ensured that the remediation of POA&Ms activity is being performed.
7. Supported the configuration-change management process to ensure that changes are reflected in the SSP-RTM that requested changes either improve or do not degrade the security posture of the environment, and that proper testing has taken place to support those changes.

Experience

7-10 Years

Level

Consultant

Education

Master

Description :

1. Assigned a major application support system in accordance with published procedures.
2. Coordinated the development of a Contingency Plan, ensuring that the plan was tested and maintained.
3. Ensured the security requirements for an assigned major support system are met.
4. Ensured that protective measures for physical security threats are in place.
5. Updated documents in the Xacta system.
6. Provided Ongoing Authorization in accordance with published procedures.
7. Provided continuous monitoring of assigned systems in accordance with procedures.

Experience

2-5 Years

Level

Junior

Education

IT

Description :

1. Conducted investigations of security violations and breaches and recommends solutions.
2. Prepared reports on security violations and breaches as necessary and provides analysis summary to management.
3. Provided Enterprise Security Engineering and Information Systems Security expertise and coordination throughout an AIS system development lifecycle.
4. Developed comprehensive policies and procedures that support a security system baseline, resulting from laws, regulations or Presidential directives and ensure that detailed technical baselines reflect the automation and implementation/enforcement of these security plans and policies.
5. Developed and refined Standard Operating Procedures (SOPs) that reflect the security operations of the technical environment.
6. Exercised Information Assurance (IA) control over development changes or requests for improvements to system configuration and system security plan to align with Sensitive Systems Policy for General Support Systems.
7. Managed and ensured that remediation of POA&Ms activity is being performed.

Experience

7-10 Years

Level

Management

Education

Master

Description :

1. Executed Certification & Accreditation activities program, from bringing a system from Development to Continuous Monitoring through the RMF security authorization process.
2. Managed security authorization documentation within the Xacta IA Manager tool (IACS).
3. Assisted in developing unified guidelines and procedures for conducting certifications and/or system-level evaluations of federal information systems and networks including the critical infrastructure of TSA.
4. Developed and present, both verbally and in writing, highly technical information and presentations to non-technical audiences at all levels of the organization.
5. Ensured IT systems have all security controls in place and functioning properly in accordance with NIST 800-53A publication.
6. Reported on FISMA compliance of system.
7. Managed and applied any necessary ISVM alerts and patches for systems and applications.
8. Assisted with external/internal audits for designated systems.

Experience

5-7 Years

Level

Executive

Education

Administration

Description :

1. Performed the Federal Information Security Management Act (FISMA) audit reviews using NIST 800-37 rev 1.
2. Updated IT security policies, procedures, standards, and guidelines according to the department and federal requirements.
3. Worked with IT Operations and Network Engineers to mitigate system vulnerabilities discovered in network devices (routers, switches, VPN Concentrator), servers, and workstations.
4. Performed information security risk assessments and assist with the internal auditing of information security processes.
5. Assessed threats, risks, and vulnerabilities from emerging security issues.
6. Analyzed security reports for security vulnerabilities.
7. Assisted with the selection and implementation of controls that apply security protections to systems, processes, and information resources using the NIST family of security controls.

Experience

2-5 Years

Level

Executive

Education

Bachelors

Description :

1. Reviewed information system Audit records weekly for inappropriate or unusual activities.
2. Updated Antivirus Definitions weekly on standalone virus scanning workstations to reduce the risk of a vulnerability being introduced onto the network.
3. Reviewed and verified system maintenance logs to include DTA log records, antivirus updates and any additions maintenance performed on a system.
4. Maintained and stored all individual user agreement forms for the system.
5. Reviewed and updated System Security Plans (SSP) when required to reflect all system changes.
6. Provided guidance to the user to assist with notifying the Security Health Officer (SHO) of any suspected incidents in a timely manner, and assist in the investigation of incidents, as necessary.
7. Conducted audits of network configuration to ensure compliance in organization regulatory standards.

Experience

2-5 Years

Level

Junior

Education

Network Systems