Carolyn Morris

Cyber Security Architect TS/SCI w/poly

Madison, AL 35756

ad4knc@r.postjobfree.com

+1-256-***-****

Over 15 years' experience in fast paced customer IT support missions, to include Cyber Security focused work performing a wide variety of service support tasks.Currently hold a active TS/SCI. Along with Comptia Certs to include; Security +, A+, and Certified Ethical Hacker (CEH). Willing to relocate to: Panama City Beach, FL - Huntsville, AL - Remote Authorized to work in the US for any employer

Work Experience

Information System Security Officer (ISSO)

Radiance Technologies Inc. - Huntsville, AL

May 2023 to Present

Prepare, review, and update authorization packages. Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media. Notify ISSM when changes occur that might affect the authorization determination of the information system(s) utilizing EMASS.

Cyber Security Architect/ hybrid

ECS / FBI - Huntsville, AL

September 2022 to March 2023

• Lead and assist in the delivery of cyber security and IT security engineering project

• Research various vendors for threats, checking cves and company history for cyber attacks.

• Create a full document about the company to include: Name, Address, entities, source code, revenue, last 2years of cves, history of company, purpose of company etc….

• Identifies, quantifies, and recommends mitigation actions for security risks as they relate to enterprise projects.

• Produce management reporting, including appropriate metrics that inform senior leadership as to the state of information risk and exposure

• Understand security product / service cost drivers and industry and business trends impacting the Agency information security program

• Recognizes and identifie potential areas where existing security policies and procedures require change, or where new ones need to be developed, especially regarding future business expansion Provide information security matter expertise to technology teams and projects

• Evaluate and recommend security software/hardware and its integration into existing architecture

• Contact customer via MS teams or mail about their tickets if needed. Cyber Security Analyst III / ISSO

COLSA Corporation/ hybrid - Huntsville, AL

August 2020 to September 2022

Apply Information System (IS) security principles, practices, and procedures under the Risk Management Framework (RMF) to maintain compliance with applicable security regulations, such as NIST, CNSSI, and NISPOM, governing the development and management of classified/unclassified information systems. Conducted and prepared IA weekly meetings. Run weekly scans and record output in audit logs. Verify the newest STIGS have been installed on all systems when released. Responsible for managing the program’s overarching security effort and representing the program to the sponsor’s security organization. Advocate for integrating security into front-end requirements and overseeing the implementation and sustainment of security controls in all stages of the program lifecycle. Update and verify all policies and procedures are current. Answer controls, collect archives for all controls, create po&ams, in Emass. Manage & oversee system administrator. Cyber Security Analyst

Quantum Technologies/ National Cyber Security Operations Center - Huntsville, AL November 2019 to July 2020

Earned CEH certification Dec 2019

Attended classes on Scap/ACAS scans, Pentesting, Nmap, wireshark, burpsuite, Utilizing automated and manual methods to perform comprehensive cybersecurity audits against customer networks, and identify deviations from acceptable security standards, industry regulations, or local policy. Perform policy reviews, internal and external vulnerability assessment, and compliance audits. Upon completion of an assessment, will author comprehensive reports which provide compliance gaps and remediation recommendations to assist the customer in protecting their systems, networks, and data.

Engineering Technician V / System Administrator

Five Stones/Redstone Test Center - Redstone Arsenal, AL October 2018 to July 2019

Manage servers and several hundred computers in several major locations linked by copper wire or a fiber optic system. Install and update various engineering software, configure HBSS to allow programs through firewall. Create and run batch files using power shell to install and update various programs. Demonstrated experience in customer service and project management for all levels of an extensive computer network.

Engineering Technician

Jacobs Engineering/ NASA - Redstone Arsenal, AL

June 2017 to October 2018

Oversee and manage all engineering test computers. Develop and maintain the security plan using RMF and following NIST guidelines. Test various different engineering software for compatibility with other operating systems using VM ware. Assist Engineers with various other computer related issues. Configure and maintain VLAN in two of the engineering labs.

Help Desk Analyst

COLSA / NEC - Redstone Arsenal, AL

December 2016 to June 2017

Redstone, AL

Support Level II helpdesk by retrieving tickets put in the remedy system by the level one support team. Remoted into user's computers by using RDP and remote control software to resolve user's problems. Install software, install printers, and trouble shoot all other reported problems. Integrated Service Desk Analyst III

Northrop Grumman/ MDA - Redstone Arsenal, AL

March 2014 to December 2016

MDA, Redstone, AL

Performed tasks in support of MDA such as answer incoming calls from employees needing assistance with various issues: Password resets for SIPR net and NIPR net accounts, remote unlock via active directory, active directory modifications, troubleshoot & resolve issues resulting from security patching, create distros and security groups using Microsoft exchange and Active Directory, troubleshoot hardware/ software problems using Lync and SCCM client, assist in VPN connection issues, detect trends and patterns in incidents and maintenance, and provide ad hoc reports. IT Help Desk Analyst II

EMCO/Army Corp of Engineers - Madison, AL

November 2011 to March 2014

Resolves PC software configuration problems and remotely installs software products or approved patches. Troubleshoots computer problems, performs hardware and software diagnostics and coordinates needed repairs. Resolve computer system problems, including coordination between users, product line specialists and components of the Local Area Network support staff. Diagnoses, isolates and analyzes problems utilizing historical database records Documents user's problems through the use of an online problem management system including opening, updating status and closing problem tickets Monitors problem ticket queue to ensure all assigned tasks are completed within specified metric requirements. Provide telephone support to end users and web support to web tickets. Respond to requests for technical assistance via phone and email* Track and route support requests* Gain exposure and provide assistance for network, VPN, and wireless technologies Desktop Engineer/Field Technician

EMCO/NASA - Huntsville, AL

August 2011 to November 2011

Performed a variety of tasks of technical nature, including hardware assembly and installation, testing and operational checks, and interconnection of computer hardware systems and peripheral equipment. Desktop and laptop upgrades, replacement, and troubleshooting hardware and software systems on Windows and Mac based operating systems.

Education

Associate in Computer Science/ software support

Wallace State - Hanceville, AL

August 2006 to May 2008

Diploma

Danville High School - Danville, AL

May 1993

Skills

• Training (2 years)

• Microsoft Word (10+ years)

• Cyber Security (4 years)

• It Security (4 years)

• Linux (1 year)

• Nist (4 years)

• Network Security (5 years)

• Cybersecurity (4 years)

• Active Directory (6 years)

• VPN (6 years)

• LAN (8 years)

• Microsoft Windows (10+ years)

• Operating Systems (10+ years)

• Microsoft Exchange (10+ years)

• Help Desk (6 years)

• TCP/IP (4 years)

• DHCP (4 years)

• Network Monitoring (4 years)

• Disaster Recovery (3 years)

• Technical Support (6 years)

• Remote Access Software (3 years)

• VMWare (3 years)

• Microsoft Windows Server (2 years)

• Network Firewalls (2 years)

• DNS (4 years)

• WAN (5 years)

• NIST Standards (4 years)

• Risk Management (4 years)

• Microsoft Excel (10+ years)

• Microsoft Office (10+ years)

• Microsoft Powerpoint (10+ years)

• Asset Management (2 years)

• PowerShell (4 years)

• Customer Service (10+ years)

• TCP (6 years)

• Troubleshooting (10+ years)

• IT Experience (10+ years)

• Administrative Experience (8 years)

• Oracle

• Databases (10+ years)

• Firewall (6 years)

• HTTPS (5 years)

• SharePoint (4 years)

• Identity & access management (3 years)

• IDS (3 years)

• Software troubleshooting

• Malware analysis

• Leadership

• Scanning (2 years)

• Vulnerability scanning (1 year)

• Documentation review (10+ years)

• Data Entry (10+ years)

• Data Analysis Skills (8 years)

• VM (3 years)

• Network Engineering (3 years)

• Reliability (10+ years)

• Research (10+ years)

• Systems analysis (10+ years)

• Visio (2 years)

• Scripting (1 year)

• Visual Basic (1 year)

• Encryption (2 years)

• Incident response (3 years)

• Facebook Advertising (6 years)

• Security analysis (6 years)

• Risk analysis (4 years)

• Communication skills (10+ years)

• Configuration management (5 years)

• Remedy (4 years)

• Mobile devices (9 years)

• SSH (4 years)

• Authentication (10+ years)

• Windows (10+ years)

• DoD experience (10+ years)

• System security

• SQL (1 year)

• PKI (3 years)

• Sentinal (Less than 1 year)

• IPsec

• SIEM

• ACAS (3 years)

• IT infrastructure

• Saas (2 years)

• Technical writing (4 years)

• NIST standards (4 years)

• SCCM

• Nessus (1 year)

• System Administration

Links

http://www.linkedin.com/pub/carolyn-morris/28/59/588 Certifications and Licenses

Security+

A+ Certified

CEH

November 2019 to Present

Top Secret Clearance SCI with polygraph

August 2020

AWS Certification

Present

Assessments

Software developer fit — Proficient

February 2020

Measures the traits that are important for successful software developers. Full results: Proficient

Indeed Assessments provides skills tests that are not indicative of a license or certification, or continued development in any professional field.

Additional Information

Top/SCI with CI poly clearance, CompTIA A+ CE, Security + CE, and Remote Assistance certified, AS400, VisualBasic.Net programming, Microsoft Office Suites, Web Design, SharePoint, HTML, Networking, Adobe, Java, QuickBooks Pro, Hardware and Software installation, Windows Vista, XP, 2000, 98, 7 and 10. Additional experience to include Microsoft Exchange server, BMC Remedy ticket system, Bomgar, LYNC, SCCM remote service, Active Directory, Blackberry, data analysis, Cisco IP VoIP phones, VPN, SQL, and installation/configuration of printers and external peripherals, Anti-Virus, TCP/IP, DNS, DHCP and WINS. Installation of GOTS/COTS software via SCCM client, Virtual Machine, and RMF framework.

Contact this candidate