Tim P.

As an ISSO (Information Systems Security Officer) my role was responsible for Assessment & Authorization control compliance, implementation & facilitation risk mitigation. Applying Information Assurance and Risk Management Framework principals in accordance with all applicable regulations. Common tools used are Splunk Enterprise, ACAS (Tenable.sc), ESS Trellix (HBSS), SCAP Compliance Checker, STIG Viewer, Evaluate-STIG, PowerShell Scripting, HEAT. •Migrated multi-site, distributed & clustered Splunk Enterprise instance to 100% VM platform. 2x upscaled performance via replication\search factors 50%, increased critical SIEM disaster recovery and redundancy capabilities. •Multi team player, new hire mentor (ISSO\ISSE roles), able to surge support other teams/contracts. Empowers team knowledge growth with focuses on documentation and hands on training in fulfilling JSIG requirements. •Developed/implemented team efforts to upgrade Splunk Enterprise Servers & PC Forwarders from v8.x to 9.x. 100% uptime indexer migration, enabled server/site redundancies, met govt stakeholder data retention requirements. •Contributed to successful A&A 3-year ATO. Provided Govt SCA/ISSM/ISSOs key server and infrastructure scans via Evaluate-STIG benchmarks. Researched/evaluated findings, co-developed POA&Ms in support of new 3-year ATO. •Provided Daily/Weekly ConMon reports, CR Cyber reviews, and technical inspections to enforce policies, controls and mitigate ID’d vulns and weaknesses utilizing security tools: PowerShell, Splunk, Trellix (AV, DLP), ACAS (Tenable). •Engineered PowerShell scripts, Windows Server Scheduled Tasks and integrated into Splunk. Scripts automate checking/starting cyber tool services, ingesting data & clearing excess Splunk files, moving old PC/user in Active Directory

Contract Surge Support as DAF ISSO/ISSM, my role is responsible for Assessment & Authorization control compliance, implementation & facilitation risk mitigation. Applying Risk Management Framework principals in accordance with regulations. •Assessed/curated BOE for DAF Cloud Gateway using ManTech ICON JSIG format. Tasked expedited team coordination between DoD CIO SAP-IT, National Mission Partners, and stakeholders within ManTech, DAF CIO Govt, contractors •Leveraged/managed/created Slack Workflows for daily SCRUM Standups, Jira dashboard for task sprint meetings, Zoom Gov & Microsoft Teams for internal/customer engagement, G-Suite and SharePoint for team collaboration. •Acting ISSM. Defined program “level of effort (LOE)” timelines for completing controls. Estimated hrs/control and LOE required between stakeholders. Factored personnel shortfalls & ISSO onboarding milestones into accurate projections

SOC Cybersecurity Analyst, responsibilities include providing full time support to a large enterprise Department of Defense customer. Directly responsible documenting, monitoring, and assessing security controls to protect customers data and network. •Developed customer product guide. Worked w/ Sentris/Splunk SMEs to reviews/drafts technical guides for customers (on Sentris, Splunk, ACAS). Ensured format align w/ JSIG security controls enabling customers operational compliance. •Updated/tested/validated ACAS Server scanning capabilities for customers testing lab. Efforts resolved scan credential issue, updated server auditing files, removal of outdated repositories. Allowed for proper scans/reports on at risk assets. •Team focused. Mentors SOC Analyst on Sentris, File Server, and SharePoint Test Plans. Ensures team remained in sync/on track w/ program manager directives. ID’s team strengths/weakness & provides recommendations to supervisors. •Always exploring & learning w/ goal to master key tech. Currently working on Splunk Dashboard functions/add-ons and Azure Basics. Continuing Sentris Admin/NFS, ACAS/Tenable, HBSS, and time permitting Ansible, Powershell basics.

Advised senior leaders on policy, security audits and assessments, and cybersecurity mitigation practices for worldwide public affairs media operations for 8 network at 31 global units. •Created event management program leveraged air gap transfers to SharePoint. Streamlined processes for 300+ task executions, resolved 150 overdue tasks. Allowed for timely VPN upgrade, hardening telework capabilities for 200+ users. •Oversaw understaffed vulnerability management program, using Nessus enabled tools. Engaged with system owners ensured mitigation of 90% critical & 80% moderate findings in 30-days. Raised DMA into compliance with DoD taskings. •Trained 6 program managers on secure video conferencing for classified briefings supporting Joint Force HQ DoD Info Network Ops Center. Transitioned “limited phone” into video communications. Increase task dissemination by 30%. •Researched, authored incident handling policy. Updates aligned DMA with DoD incident reporting timelines and quick response and resolution to 5 security violations.

•Migrated 2 legacy network accreditations to RMF (Risk Management Framework). 400+ security controls processed and validated. With short-staffed office, obtained 2 Full ATO's (Authorization To Operate). •Audited 75 privileged users on DoD cyber workforce qualifications. Verified credential status and removed 10 invalided accounts, risk exposure reduced 13%. •Managed 36 unit cybersecurity inspections. Assessed and corrected 200+ violations on-the-spot. Increased unit compliance contributing 3 points to Command Cyber Readiness Inspection. •Completed Security Impact Analysis of unauthorized network discovery tool for migration of infrastructure and computers to Enterprise IT as a Service (EITaaS). Advised Authorizing Official for Risk Acceptance. Reduced risk by directed limited use, strict monitoring, data safeguards via chain of custody, and need to know personnel only. Maintained network confidentiality, integrity, and protected 200+ sites across Space Command. •Deployed to Al Udeid AB, Qatar, served as Wing Computer Security Program Manager. Revamped “new arrival” training program (insider threat, data loss prevention (DLP), and incident response) for 4K personnel over 6-months (24 sessions). Ensured situational awareness regarding personal fitness trackers that create activity heat maps, putting Operational Security at risk. User DLP training reduced flash media cross domain violations down to 0.02%.

COMSEC Program Manager for National Reconnaissance Office Head Quarters, largest cryptographic materials account, oversaw encrypted key management of in support of critical operational worldwide circuits. •Fielded $360K project to replace/install 25 new encryption devices with enhanced cryptographic keys. Coordinated 3 teams over 4 years. Actions enhanced “DoD Friendly Force Tracker” real-time communications between forward operators and command centers. Project saved $100K of resources and 300 duty hours/year.

Oversaw and monitored health, performance, and security of MacDill AFB's $14M network for 4K+ users in the 6th Air Mobility Wing (6 AMW) and 49 tenant units. Provided computer and file server security, managed web migration, configured network firewalls, web filters, and software vulnerability scanner suite. •Organizationally focused 60+ web admins on migrating 35 intranet web sites to the centralized Air Force Portal. Migration process empowered admins via Software as a Service model to be content creators for base-wide units. Decommissioned migrated intranet sites reduced workload by 750 hours annually.

Oversaw Joint National Security Agency/Central Security Service Texas (NSA/CSS Texas) IT support operations center, ensuring systems & hardware support to 2K+ users, and global mission messaging capabilities for national security systems. •Compiled daily executive-level summaries of mission degradations for senior leadership. In addition, trained personnel on secure system use, 1.1K critical messages relayed, with strict adherence with management policies. Training ensured 100% capability, with 99% messaging integrity.

Provided intel communications computer support for the Korea Air and Space Operations Center, and Communications Support Processor (CSP) operations, processed, routed, error corrected 500K in/out-going messages, supporting 14 orgs on Korean peninsula & Japan. Administered Sensitive Compartmented Information classified Local Area Network (SCI-LAN) of 72 systems and servers valued at $350K. •Kept 8 critical communications circuits online/maintained. Performed formatting corrections for critical messaging system, which ensured 206K messages were processed during the world’s largest, peninsula-wide Command and Control exercise. Overall attention to detail achieved a 99.9% messaging availability rate.

Assigned initially as member of the Network Control Center helpdesk supporting 4.3k users before quickly moving on to the Information Protection Office to become a subject matter expert in system administration, vulnerability management, and boundary defense. All in support the 62d Airlift Wing, 446th Airlift Wing, and Western Area Defense Sector. •Detected and responded to network-wide virus infection. Isolated VPN network attack vector, patched 30+ computers. Teamwork contained 3K infected systems, mitigated virus, and maintained Information Operations. Base network maintained circuit connection with MAJCOM (1 of 13 bases permitted to do so). Successful containment/response enabled 3 Operations Squadrons to continue 100% of Air Lift missions world-wide.

Introduction to Python and Data Types.

Career Accelerator