Information Technology Project Management

Larry L. Jones

240-***-**** ************@*****.***

SUMMARY: Seasoned, action-oriented, and results-focused Information Assurance and Project Management Professional, offering over 28 years of Information Management and Information Technology supporting Department of Defense and Homeland Security. Proficient in Info-Security Analysis & Mitigation to include manage, monitoring servers & network systems with knowledge of VMS & DIACAP (NIPERNET, SIPERNET and other approves systems). Over 29 years of military service, responsible for the leadership of 133 members of the Armed Forces who provide military police support in the US and abroad.

Education and Certifications

National Graduate School Completion: July 2004

Master of Business Management, Quality Systems Improvement

Bowie State University Completion: May 1996

Bachelor of Science, Communication Journalism

Certifications:

Cryptographic Coding and Decoding, Microsoft NT Server Configuration, Core Technologies, NT 4.0, Security +, Forensic Analysis, CISSP candidate September 2024

DOD Top Secret Security Clearance/SCI

Professional Experience

DISA Transport Services May 2022-Present

Military Executive

Senior Executive Service/General Office level (SES/GO) correspondence management and other administrative transactions designed to relieve the supervisors and action officers of administrative and office management tasks.

Employing senior-level knowledge of national strategies, plans, policies, and directives for offensive and/or defensive cyber operations including but not limited to U.S. Department of Defense (DoD) Directive 3600.1, Director of Central Intelligence Directives (DCIDs), National Security Presidential Directives (NSPDs), Homeland Security Presidential Directives (NSPDs) to assist the Transport Executive (TE).

Receives, assigns, manages, and prepares briefs of on-time/late tasker status to senior leadership, including military performance evaluations.

Organizing and supervising the collection of information needs and requirements of Transport Executive customers and overseeing the execution of plans and strategies to meet those needs.

Delivering intelligence briefings and other relevant communications to senior Division Chiefs, external partners, and high-level officials in other federal agencies or states that influence policy making (e.g., Congress, DOD, White House councils) on matters of transport security and cyber defense to explain and defend policies and programs or guide alternative courses of action.

Prepares, processes, recommendations for senior level briefs for inter and external federal government and foreign partners.

Expertly manage technical support operations, troubleshooting issues, problem management, and problem resolution.

Conduct status meeting to track metrics to report progress and deficiencies.

Maintains secure files to ensure compliance with applicable regulatory guidance.

Prepares, updates, and coordinates requests for evaluations.

Manage, monitor, and configure all daily activities of DISA IE Transport services configuration and operation.

Innovative and results-driven manager with 26 years of Information Technology management communications and networking experience.

Effective leader with continued success in the training, coaching, and managing of personnel.

Established operational leader with a high reputation for successful active management, policy generation, and procedural guidance of transport networks.

Subject matter expert in satellite communications and experience in the analysis of I.T. trends impacting the enterprise.

Experienced information technology service management focusing on integration and network service operations.

Expertise in the life cycle system logistics support of systems and facilities processes, including maintenance, repair, quality assurance and configuration management.

US Army August 2020 – April 2022

Mobilization Officer in Charge

Serves as the formulation OIC of plans, policies, programming, and budgeting data pertaining to unit readiness, mobilization, deployment.

Manage, monitor, configure all daily activities of 200 MP CMD MOB Team configuration and operation team, manage monitoring and control of future deployments.

Provides technical expertise and assistance on program areas to all levels of command at state and national level.

Conducts parallel planning with Joint Staff, Headquarters, Department of the Army (HQDA), US Army Forces Command (FORSCOM), Mobilization stations and other state JFHQs.

Maintains unit readiness for current and future deployments.

Conduct status meeting to track metrics to report progress and deficiencies.

Supervise a team of 12 to manage Army needs worldwide.

Coordination with all down trace units to meet Army mission and needs.

Causality Assistance Officer trained in conflict resolution.

Validation authority.

Military Funeral Honors Officer in Charge Coordinator.

G-3/5/7 Plans Officer

University of Maryland College Park August 2017–August 2020

DIT Security Services Security Manager

Maintains and enhances the Information Security Program for the college.

Manage, monitor, configure all daily activities of UMD security configuration and operation of installed Timing and Synchronization systems, manage Monitoring and Control application.

Providing leadership and subject matter expertise to cyber intelligence collection and analysis efforts to inform and execute university-wide cyber operations.

Oversees and leveraging a robust network of cyber defenders’ tools as well as other intelligence components to better understand identified intrusion sets and deviations and to build better defensive cybersecurity strategies.

Working as principal technical authority and subject matter expert with responsibility to ensure effective, economical, and advanced technical management of customer networking requirements for security and synchronization devices systems and applications and applies a mastery level of IT networking principles, concepts, methods, and practices in timing & synchronization that provides security monitoring for UMD.

Manage, Develops, interprets, plans, and applies policies, processes, procedures, and strategies in the delivery of multi-discipline IT networking services required to achieve data and system integration and interoperability for assigned systems and applications.

Maintaining and leveraging a robust network of cyber defenders as well as other intelligence components to better understand identified intrusion sets and deviations and to build better defensive cybersecurity strategies.

Supervising staff, projects, and employees in the application of reverse malware analysis and engineering techniques to prevent incidents or mitigate threats to university systems and networks.

Identify vulnerabilities and threats and create a remediation standard operating procedure.

Develops and implements complex configuration management plans for complex LANs and WANs.

Manage, Develops, interprets, plans, and applies policies, processes, procedures, and strategies in the delivery of multi-discipline IT networking services required to achieve data and system integration and interoperability for assigned systems and applications.

As assigned, serves as an IT Specialist / Systems Engineer with responsibility for carrying out the mission and functions required for operation, maintenance, and defense of complex electronics, digital computing and ancillary devices, and computer programs.

Responsible for systems analysis, planning, design/development, and execution of complex automated test system projects.

Conduct forensic analysis and incident response procedures.

Reduce network threats.

Coordination with all university schools to establish a university standard.

Maintains the network infrastructure with departments and coordinates manages system integrity.

Conducts system analysis to develop new security policies and guidelines as needed.

Leads security awareness training and standards for the university.

Utilizes system tools to investigate, remediate and track all security issues.

Enforces all University of Maryland security standards.

Meet with auditors to ensure compliance.

Develops security policies, Provide data encryption for sensitive data.

Develop firewall rules and scripts to capture security metrics and provide security blocks.

Interact with University of Maryland Students, Faculty staff and third-party vendors on all security issues.

Ensures that all systems are compliant with all state and federal guidelines.

Prince George's Community College July 2013 – July 2017

Director of IT Security Services

•Maintains the creation and implementation of end-to-end tactical and strategic level cyber operations plans based on technical cybersecurity expertise, applicable policies, and standard operating procedures.

•Maintains and enhances the Information Security Program for the college.

•Manage, monitor, configure all daily activities of PGCC security configuration and operation of installed Timing and Synchronization systems, manage Monitoring and Control application.

•Working as principal technical authority and subject matter expert with responsibility to ensure effective, economical, and advanced technical management of customer networking requirements for security.

•Oversees and directs the actions and reports around immediate remediation and containment processes.

•Leads development of primary and contingency action plans, organizing staff to select the most appropriate and effective methods of defense/attack that align with college operational protocols.

•Synchronization devices systems and applications. Applies a mastery level of IT networking principles, concepts, methods, and practices in timing & synchronization that provides security monitoring for PGCC.

•Manage, Develops, interprets, plans, and applies policies, processes, procedures, and strategies in the delivery of multi-discipline IT networking services required to achieve data and system integration and interoperability for assigned systems and application.

•Ensures that organization's network can provide a wide range of services that are vital to the accomplishment of mission requirements.

•Assesses current technologies, systems, processes, and procedures and evaluates them against FERPA, HIPAA, PCI, SOC II, federal and state information protection and privacy regulations, and other relevant regulations and standards.

•Maintains and enhances privacy policies, procedures, and enforcement mechanisms.

•Creates and administers risk assessments and compliance audits.

•Oversees the delivery of information security and privacy training.

•Acts as sponsor and oversees the delivery of technology projects related to information security and privacy.

•Acts as the primary college control point during follow-up on significant information security incidents, oversees development of response plans and provides timely update reporting.

•Oversees development, implementation, and maintenance of enterprise-wide information security technology.

•Collaborates with Information Technology teams to ensure information security risks in both ongoing and planned operations are properly considered and that all compliance matters are being adhered to as required.

•Keeps abreast of new technological challenges to such systems as well as new developments in system protection and recognized IT security-related standards.

•Collaborates with Software Sales, Marketing and Product Management to ensure a competent road map for protecting college and students’ assets is in place and adaptable to changes and threats.

•Work with our IT organization to effectively architect, investigate, test and deploy security measures and solutions within internal and other educational domains.

•Maintain relationships with local, state and federal law enforcement and other related government agencies as well as information sharing partners.

•Oversee incident response planning as well as the investigation of security breaches, an assist with the disciplinary and legal matters associated with such breaches as necessary.

•Work with other senior management to prioritize security initiatives and spending based on appropriate risk management or financial methodology.

•Work with outside consultants as appropriate for the independent security audits.

•Monitor backup integrity and benchmarked with Amazon Web services.

TEK Systems – Arlington, VA Jan. 2012 – June -2013

Senior IDS Analyst Shift Manager

•Managed six individuals on the Cyber Incident Response Team for the midnight shift.

•Managed the Incident Response Team during incident investigations, vulnerability assessments, malware analysis, and the development of new defensive security solutions.

•Serves on applications development teams to ensure network requirements are addressed during the systems development process from translation of functional requirements through systems testing.

•Activities includes managing approaching assignments with an unusual depth of analysis which normally requires significant departures from established practices due to the number of problems manifested, the sophistication of the architectural infrastructure, the complexities of the underlying applications and system configurations, and the diversity of the functional user communities supported.

•Responsible for defining procedures for providing post-implementation support and integrates a variety of systems development activities.

•Handled and analyzed events that were escalated from the Network Monitoring Center, Information System Security Officers, System Administrators, and any employee that reported potential computer security issues.

•Monitored and analyzed network traffic, IDS alerts, network logs, system logs, and open-source information to detect and report threats to the networks. Provided threat and damage assessment for security threats and potential network vulnerabilities to determine the appropriate action/response to mitigate risks. Monitored network activities and analyzed security events to create monthly statistical metric reports that assisted in isolating events, creating filters and baselines.

•Utilized the Arc-Sight Console secure operating system to conduct malware and computer security analysis. Used Sandbox Wireshark, ENDCASE and VMware to analyze PCAP, exe, word documents, jpeg, links, log files and various types of malware. Utilized knowledge of DITCAP, FISAM and NIST certification and accreditation security certification processes while providing expert level knowledge to customers and government entities.

•Drafted intelligence and alert reports, which resulted in an increased situational awareness, ensuring compliance for all affected DOD systems for use by senior management.

General Dynamics – Crystal City, VA Feb. 2007 – Jan. 2012

Software Developer Manager

•Served as a software developer tester on new and existing department programs designed to combat terrorism. Managed inter-agency programs that are connected to bring all areas of law enforcement together for information sharing and exchange. Assisted in the development of life cycle and architecture plans for the agency.

•Installed and upgraded Windows servers at FBI to include configuration, optimizing and testing network servers connecting to hubs, routers, and switches to ensure compliance with security policy procedures and technical requirements. Used Citrix connections and VPN to remotely deploy, troubleshoot and test programs on user workstations. Analyzed firewall logs and other logs to verify the integrity of network traffic.

•Assisted with preparation, conducted security exercises and functionality of all programs used in law enforcement to combat terrorism in the law enforcement community. Performed system checks of on all systems to ensure software updates do not violate CIRT policies.

•Planned, converted, and tested new systems while managing agency resources on division level. Assisted with certification and accreditation efforts, corrected by either correcting identified vulnerabilities or mitigating risks utilizing additional means.

K-Force – Beltsville, MD Aug. 2008 – Sept. 2011

Cyber Analyst Manager

•Served as the Cyber Incident Response Team Lead managing 12 individuals. Conducted interviews for Tier 1 and Tier 2 analyst positions and managed resources. Evaluated escalated tickets from Tier 1 and Tier 2 analyst to ensure accuracy of information. Coordinated security events with State Department personnel worldwide. Used a remedy-based system to generate tickets and create reports to distribute to various entities within the office.

•Monitored network activities and analyzed security events to create a monthly statistical metric report that is used to assist in isolating events and creating filters and base lines. Conducted incident handling and analysis of events that were escalated from the Network Monitoring Center, Information System Security Officers, System administrators and any employees that reported potential computer security issues.

•Researched publications for new emerging viruses, worms and Trojan horses deemed as a potential risk to the network, including details of the vulnerability and technical recommendations prescribed by vendors of affected software. Assisted in the publication of security brief that is distributed to various security offices worldwide.

•Drafted numerous intelligence and alert reports, which resulted in increased situational awareness, and ensured compliance for all affected DOD systems. Developed monthly metrics to present to management. Provided detailed reports for each incident from the date that the alert was generated until the event has been mitigated.

•Utilized knowledge of DITCAP, FISAM & NIST certification and accreditation security certification processes.

Contact this candidate