Edward Lopez

As a Security Control Assessor (SCA) at Booz Allen Hamilton, supporting NASA, I conduct comprehensive security assessments to ensure compliance with federal cybersecurity standards, including NIST 800-53, FISMA, and FedRAMP. My role involves evaluating security controls, identifying vulnerabilities, and providing risk-based recommendations to enhance the security posture of NASA’s information systems. Key Responsibilities: • Perform security control assessments (SCAs) to validate system compliance with federal cybersecurity frameworks. • Conduct risk assessments and security gap analyses, documenting findings in security assessment reports (SARs). • Evaluate security documentation, including System Security Plans (SSPs), Plan of Action & Milestones (POA&Ms), and Risk Assessments. • Collaborate with Information System Security Officers (ISSOs), system owners, and engineers to remediate vulnerabilities. • Utilize automated security tools for vulnerability scanning and compliance testing. • Support NASA’s Authorization to Operate (ATO) process by ensuring systems meet required security baselines. • Provide recommendations to improve security controls and mitigate risks. Skills & Expertise: ✔ Security Control Assessment & Risk Management ✔ NIST 800-53, FISMA, FedRAMP Compliance ✔ Security Documentation & Compliance Reporting ✔ Vulnerability Scanning & Risk Remediation ✔ Plan of Action & Milestones (POA&M) Management ✔ Security Audits & Continuous Monitoring This position allows me to leverage my expertise in cybersecurity, compliance, and risk assessment to support NASA’s mission by ensuring the security of critical space and IT systems.

As an Information System Security Officer (ISSO) with the Department of Homeland Security (DHS) Headquarters, Office of the Chief Human Capital Officer, I contribute to securing and enhancing DHS’s critical information systems. My role focuses on supporting national security and ensuring the reliability and accessibility of IT infrastructure while safeguarding against unauthorized access and cyber threats. Key responsibilities include: Conducting and assisting with security audits to identify vulnerabilities and enforce compliance with DHS and federal regulations. Supporting the development and implementation of DHS-wide cybersecurity policies and procedures to strengthen system reliability and mitigate risks. Monitoring and managing Plans of Action and Milestones (POAM) to ensure timely remediation of identified risks and system improvements. Collaborating with cross-functional teams to address complex IT security challenges, providing analytical insights and actionable recommendations. I am dedicated to applying innovative strategies and solutions to safeguard organizational assets and support DHS in its mission to protect the nation’s security and economic stability.

Perform Information System (IS) security controls assessments for NASA Organizations based on NIST Risk Management Framework (RMF) requirements Generate reports on assessment findings including the effectiveness and/or deficiencies of the security controls implemented in the IS and its operational environment, to include In-briefs, interviews and Out-briefs. Recommend corrective actions to address identified deficiencies. Work with a team to resolve issues and perform tasks in parallel. Report to the supervisor periodically on team and individual work accomplishments, problems, progress in mastering tasks, work processes, and individual and team training needs. Create NIST Risk Management Framework templates and other documentation artifacts.

Provide prompt, courteous, and high-quality end user support services to approximately 37,000 US Army Corps of Engineers (USACE) customers located throughout the United States and Outside the Continental United States (OCONUS). Troubleshooting Tier 1 and 2 issues for end users within the organization and applications/systems owned by USACE. Accurately triage, categorize, document, escalate and monitor all applicable tickets via ServiceNow ITSM. Interact with Network Operations Security Center (NOSC), software systems engineering, and applications development teams for the restoration of service and correcting core issues. Remoting into customers assets using BOMGAR application or RDP for direct support with issues. Performing user account creations, management, and user profile analyst using Active Directory (AD). Utilizing several CISCO applications such as CUCM/CUCA for assistance with VOIP issues and providing assistance over Jabber and Finesse.

Works directly with customers to assist with all Microsoft Office application issues including Teams, Microsoft Edge, and Excel. Providing help desk-based IT phone support to end-users including troubleshooting, proxy server network issues within a Windows Virtualized network. Assisting customers with their PIV (Personal Identity Verification) cards for authentication and access to DoD computer networks. Help desk support with using BMC Remedy ticketing system, over the phone customer service, resolving any customer issues in a remote setting. Handling 50-100 calls daily and 100-200 average email & web requests daily. Providing global comprehensive customer support in a call center and remote setting while cycling through a24/7 work shift schedule.

Team lead on ensuring Microsoft Teams account management operations are executed in a timely manner for over 2 million users Department of Defense wide with Commercial Virtual Remote (CVR) Environment. The DoD CVR program is to help move towards a telework posture in response to COVID-19 national emergency on a large-scale. Maintaining skill levels required by the government through training of current and future commercial off-the-shelf technologies used by the Department of the Navy.

Directed the movement and spotting of aircraft ashore and afloat. Operated, maintained, and performed organizational maintenance on ground-handling equipment used for moving and hoisting of aircraft ashore and float. Utilized eSOMS (Electronic Shift Operations Management System) to manage and execute tagout operations for maintenance and safe equipment. Supervised the securing of aircraft and equipment; performed crashed rescue, firefighting, crash removal, and damage control duties; performed dues in connection with launching and recovery of aircraft. Head trainer and mentor for over 40 personnel for the maintenance, management, and preservation of life support equipment

Ensured attentive customer service and customer satisfaction leading to successful sales Took inventory and accounted of over 20,000 products in the paint and electrical departments within specified guidelines Completion of independent job tasks while maintaining a clean and safe workstation