Security System

Summary

. Extensive experience in security solution design and implementation

in systems, hosts and applications security.

. Experienced with security standards, DISA DoD requirements and

certification. PCI, HIPPA compliance.

. Experienced in security detection and prevention tools

implementation and integration, penetration testing and internal

security audit for various components.

. CISSP Certification in process.

Education

MS in Computer Science, University of Texas at Dallas, Richardson, TX

BS in Electrical and Electronics, Wuhan University, China

Training at TechSkills January, 2010- present IT Training and

Certification

Work Experience

Concentra, Inc May, 2010 - Aug., 2010

. SIEM solution research for security event management.

. GDG Log source management, log search, event data review.

. Security alerts analysis, processing, Security threat analysis, report

generating, and meeting with different functional group for

vulnerability analysis

. Unix, Linux and windows server build audit, and user account audit.

. Reviewed and re-implemented Snare audit configuration for windows

servers to send auditing record to log server as part of the security

event auditing. Worked with Windows server team for deployment

. Implement OSSEC syscheck solution to complement the existing syslog

for system integrity.

. Imperva administration, security alert, and data audit policy

development and management. Manage and process Imperva alerts from

Solution Center. Imperva database risk management, vulnerability scan

. Nessus scan all critical servers and create scan report.

. Firewall rule review, firewall logs review. Using CiscoWorks to review

firewall configuration.

. Security questionnaire for vendor security posture auditing.

Nortel Networks March, 1995 - September, 2009

System/OS/Application security design and DoD solutions development -

2003-2009

DISA STIG compliance

. Project lead, IPv6/IPv4 Dual-stack support for DoD communication

system.

. Implemented subscriber registration accounting for DoD STIG

requirement.

. DISA STIG compliance for MCS IP communication system, including web

application, Oracle database, VoIP application server, Unix(Linux)

OS, Windows server.

. Maintained the Security Administration Guide for accuracy and

updated.

DoD JITC system security implementation

. Installation and commission the MCP system for DoD JTIC testing,

apply all security measures.

. Internal audit with DoD STIG requirement for system component and

application.

. Implemented firewall ACL control and NAT configuration, IPSec mesh

for the system.

Operating system security

. Lead engineer to implement operating system security following

standards and industry best practice for the following platforms:

Solaris 8, 9 and 10, Red Hat Linux 6.2, RH Linux AS 2.1,3 and

RHEL5.2, Windows 2000/2003 server.

. OS hardening works includes following areas: Service minimization,

access control, Kernel tuning, auditing and logging, and system

accounting

Security tools : Antivirus, IDS, System integrity tools

. Tested and evaluated the following antivirus and IDS tools: OSSEC

as HIDS, McAfee Virus scan for Windows, McAfee Virus scan command

line for Unix/Linux, McAfee HIPS, ISS IDS, Tripwire, Snort and

Snare.

. Tested System integrity tools: AIDE, Assuria, FCheck, FCIV, and

Symantec ESM, etc.

. Integrated McAfee Virus scan tool, HIDS tool into product solution,

designed perl script wrapper for system installation and

commission, tool admin after fully test and traffic profiling with

fully operated system.

Penetration testing and internal security auditing

. Vulnerability and risk assessment with following scan tools to test

system, generated report, followed up with fixes: Nessus, Nmap,

Nikto, CIS scoring tool, ISIC, UDPSIC, TCPSIC, Wire Shark/Ethereal.

MCS Media Server Application development -C/C++ 2002-2003

MCS Media Application Server provides voice mail, voice activated dialing,

conference services. The software runs in Windows 2003 server.

. Developed service script for Voice Mail service. This voice mail

service emulates Meridian Voice mail, send voice email and video

and voice email. Support referring call according to the routing

rules defined by user. Support the capability to edit the outgoing

voice mail. Support voice mail fast forward and backward

capability.

. The voice mail trial service was deployed to more that 10 trial

customer sites. Wrote administrator installation and provisioning

guide and user guide for this voice mail service, provide design

support for the service.

MCP SIP base design - Java 2001-2002

. Designed and implemented SIP transaction state machine following

SIP protocol for MCP SIP transaction. Developed part of the

transport controller framework to provide transport layer

connection management and data handling for TCP and UDP, SCTP.

. Participated the development/testing for active-standby feature for

SIP session manager on Sun Solaris server with multiple network

interfaces. This feature adds the reliability of MCS system.

. Develop prototype SIP session distributor process which fronts

multiple SIP session managers to provide system reliability and

load balance.

STEP- System Test Execution Platform - C/C++ 1995-2000

STEP is the family of off switch tools provided for designers and testers

to test software developed on Nortel switch. The software developed on VME

UNIX and Windows NT. The software provide manual GUI interface testing and

scripting language interface for automatic testing.

Contact this candidate