Davis Le

Work with internal teams, vendors, and federal agencies to identify and understand customer needs, generate artifacts to submit as part of technical proposals, proofs of concept, and product catalogs. Review Bills of Materials and quotes based on requirements. Conduct research to stay abreast of best of breed vendors and solutions in their respective areas using resources such as Gartner and Forrester. Assigned as Cyber Security Systems Engineer working with DHS International Boundary & Water Commission (IBWC): -Monitored CloneGuard SIEM solution for alerts, conducted investigations including review and analysis of activity logs, and escalated to the Information Management Division administrator and system owners as needed. -Responsible for patch management of enterprise workstations via Qualys and Ivanti solutions to ensure timely remediation of vulnerabilities, prioritized based on severity in accordance with federal and agency policies, requirements, and timelines pursuant to DHS BOD 22-01. -Gathered and extracted metrics and data points from Qualys, generated artifacts and deliverables to validate compliance with CDM and FISMA reporting requirements related to Hardware and Software Management (HWAM/SWAM). -Generated weekly reports related to SIEM alerts, patch management, and HWAM/SWAM, and briefed ISSM and IMD stakeholders. -Created, updated, and maintained System Security Plan and other agency documents in accordance with NIST Special Publications and federal guidelines. Assigned as Information System Security Officer working with DHS U.S. Inspector General for Tax Administration (TIGTA): -Reviewed, revised, and updated security control verbiage in Archer GRC to reflect the current state, as well as included detailed references to agency documentation where additional details and supporting information could be found based on NIST RMF, Treasury Directive Publications, and TIGTA exhibits

Department of Homeland Security - Continuous Diagnostics & Mitigation (CDM) Worked as part of a team to develop, test, and implement CDM DEFEND E Phase 2 - Identity and Access Management. Primary focus on CyberArk Privileged Account Security Solution including Enterprise Password Vault, Central Policy Manager, Password Vault Web Access, Privileged Session Manager, and SSH Key Manager. Worked closely with SailPoint Engineers for integration between the two solutions as well as other tools within the CDM stack.

Department of Homeland Security - Cybersecurity and Infrastructure Security Agency (CISA) in partnership with MITRE Worked as part of a team responsible for conducting Security Architecture Reviews (SAR) of DHS High-Value Assets (HVA). Tasks included reviewing all relevant artifacts including, but not limited to, System Security Plans, NIST security controls, Network Diagrams, POA&M reports, asset inventory lists, COOP/DR plans, and participated in Technical Exchange Meetings to validate understanding of the system's overall security posture. Security Architecture Review reports and presentations were generated and briefed to system owners and stakeholders providing key insights and areas of potential improvement to further secure sensitive data contained within the HVAs.

Department of Homeland Security - Continuous Diagnostics and Mitigation (CDM) in partnership with ManTech As a Cyber Security Engineer, worked as part of a team tasked with implementing an Identity Access Management (IAM) solution for DHS, DOJ, and all participating Components, in accordance with DHS’s Continuous Diagnostics and Mitigation (CDM) project requirements. Primary focus on CyberArk Privileged Account Security Solution including Enterprise Password Vault, Central Policy Manager, Password Vault Web Access, Privileged Session Manager, and SSH Key Manager. Familiarity with SailPoint IdentityIQ and Splunk Enterprise. Additional tasks included hardening of Windows Server and Red Hat Enterprise Linux operating systems according to DISA STIGs.

Department of Homeland Security - United States Secret Service (USSS) Continued efforts from previous role as a Cyber Security Engineer with SRA International

Department of Homeland Security - United States Secret Service (USSS) As a Cyber Security Engineer, worked as part of a team tasked with modernizing the IT infrastructure for the Secret Service. Team performed a gap analysis and assessment of the “as-is” environment and then provided suitable recommendations based upon employing best of breed solutions as well as leveraging of existing tools according to the customer environment and current cyber security landscape. Responsible for designing, testing, implementing, and creating documentation in accordance with DHS Systems Engineering Life Cycle requirements. Primary focus on McAfee SIEM, FireEye Platform (CM/EX/NX), Barracuda Spam Firewall, and McAfee Email and Web Gateways

Corporation for National & Community Service (CNCS) As a member of the helpdesk, responsibilities included managing tickets and coordinating issues based on service level agreements and priority of issues reported. Responsible for gathering metrics for tickets and phone calls and preparing reports for weekly operations meetings with the federal customer. Very heavily involved in daily operations and ticket resolution, oftentimes requiring collaborating directly with the Systems Administrators, Network Engineers, Database Administrators, Cyber Security Engineers, Desk Side Support, and Asset Management teams. Assisted with technician scheduling to provide seamless support for customers; at one point requiring on-call 24/7 availability. This position required Tier I, II, and III level skills to support customers remotely while rotating out to the client site as needed.

Cystic Fibrosis Foundation (CFF) Responsibilities: • Contracted out to the Cystic Fibrosis Foundation o Worked in a team to maintain a WAN consisting of several hundred computers in over 75 chapters and branch offices across the country o Setup and configured routers, switches, printers, fax machines, projectors, and conference rooms o Troubleshot and maintained all aspects of corporate desktops and other small systems in person, over the phone, and remotely via Symantec pcAnywhere o Installed, maintained, and documented software and licenses while communicating with vendors to repair and replace hardware as needed o Created, updated, tested, and managed images with new operating system patches, upgrades, releases, and third-party software via Norton Ghost o Recorded all pertinent information within Track-It ticketing system Corporate Offices Responsibilities: • Traveled to install and maintain applications, hardware, and network on a WAN consisting of over 100 computers at 4 corporate branch office locations throughout the D.C. Metropolitan area • Assigned and prepared classrooms for technical training courses based on available rooms, available inventory, hardware requirements, and seating occupancy • Re-imaged machines and configured required software for various training courses on VMware (e.g. Windows Server 2000/2003, Exchange Server, SharePoint, etc.) • Provided in-person technical assistance to users to ensure that training courses went smoothly

Magna Cum Laude Dean's List Volgenau School of Engineering - Certificate of Achievement for Academic Excellence Completed Coursework • Network Security I • Computer Crime/Forensics/Auditing • Networking Principles I • Networking Principles II • Network Servers/Infrastructures • Database Fundamentals • Advanced Database Management • Database Administration • Programming Fundamentals • Applied IT Programming