Security Information

Winnie Ngankam, Cyber Security Analyst

(***) *** - 9440, adls0x@r.postjobfree.com

Nationality U.S CITIZEN

PROFILE Motivated I.T security specialist with a passion for discovering effective solutions to safety risks and concerns currently seeking Security Specialist, Risk Management or Cyber Security related position. Advanced user of intrusion-detection, adept at monitoring networks, developing security measures, policies and procedures and completing technical reports.

EMPLOYMENT HISTORY

Mar 2019 — Present Information Security Analyst, Verizon

• Monitor and update Intrusion Detection System (IDS).

• Develop and review Standard Operating Procedures (SOPs).

• Act as main investigator for incidents identified by SOC analysts.

• Identify security issues and risks and then develop mitigation plans.

• Perform risk assessments and identify IT controls for significant processes.

• Provide IT security-oriented guidance, advice and support to maintain ATO.

• Communicate results of risk assessments to management and process owners.

• Review relevant policy and technical RMF Controls for specific applicability and compliance requirements.

• Make recommendations to management, and stay up-to-date on information technology trends & security standards.

• Assist in the development and on-going maintenance of the company System Security Plan (SSP) and Plan of Action and Milestones (POAM).

• Support company with knowledge and guidance in following NIST, FISMA, and Agency Information Security and Privacy Guidelines.

• Perform assessment and Authorization (A&A) Services, Continuous Monitoring Strategy Development, Technical Testing and Penetration Testing (optional tasks), NIST SP 800-53 Rev 3 to Revision 4 updates. Nov 2018 — Mar 2019 I.T Cybersecurity Specialist (Intern), KeyW

• Develop and maintain Information Systems Security Plan (ISSP).

• Developed Plans of Actions and Milestones (POA&Ms) to correct findings of non-compliance.

• Performed system vulnerability scans including Nessus / ACAS, and SCAP Compliance Checker (SCC).

• Researched, interpreted, and provided technical policy guidance pertinent to information and system security.

• Provided administrative support to Xacta (or equivalent GRC tool) users and authoring operational procedures.

• Assessed system compliance against NIST, DoD, and DHA security requirements to include the NIST 800-53 controls and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).

• Developed security authorization documents such as System Security Plan, Contingency Plan, Incident Response Plan, Standard Operating Procedures, Plan of Actions and Milestones, Remediation Plans, Configuration Management Plan, etc.

EDUCATION

May 2019 Associate of Science, Howard University

SKILLS Customer Service Expert

Microsoft Office Expert

SQL Expert

Linux Expert

Cyber Security Expert

Penetration Testing Expert

RMF Expert

NIST 800 Expert

CERTIFICATIONS

CompTIA A+

CompTIA Security +

CEH (Certified Ethical Hacker)

CAP (Certified Authorization Professional)

REFERENCES References available upon request

Contact this candidate