MDN EPIE NNOKO NGAAJE
Laurel, MD 20708
Tel: 202-***-****
********@*****.***
SUMMARY.
-Experienced in the cyber security disciplines of Continuous Monitoring, Incident Response, and Security Engineering.
-Strong working knowledge of IT security principles, concepts, practices, products, services, and methods for evaluating information system risk and vulnerabilities.
prevent, detect, analyze, and respond to security incidents, operated and analyzed continuous monitoring tools (e.g., Nessus, csam,)
- U.S Army 2ND Lieutenant with Active Secret Clearance and over 5 years of proven experience in the United States Army. Dependable professional interested in Cyber Security and investigation job positions with any company.
TECHNICAL SKILLS OVERVIEW
•Platforms:
oWindows 7/8/8.1/10, Windows Server 2012 R2, Linux /Red Hat/, FIPS 199, FIPS 200, NIST 800-53 Rev4, NIST 800-30, NIST 800-37, NIST 800-39, SSP, ST&E, SAR, Plans of Action and Milestones (POA&M), Authorization to Operate (ATO) Letter, MS Office, SharePoint, Nessus Vulnerability Scanning Tool, Splunk, Scan Analysis, Risk Management Framework (RMF), CSAM.
•CERTITICATIONS
•CompTIA Security+ in progress
WORK EXPERIENCE
US ARMY,
Lieutenant-Military Police Officer December 2014 – Current
Military Police Officer.
Performs the full range of supervisory responsibilities including planning and assigning work to staff based on priorities and schedules, balancing workload and adjusting schedules and duty assignments, and reviewing job performances.
Conduct interviews and Military police investigations. Responsible for the investigation, apprehension, or detention of persons suspected or convicted of offenses against all applicable criminal laws of the United States.
Responsible for the anti-terrorism and force protection measures within the command.
Advise the commander of security measures to enable garrison, base-camp or unit operating location operations.
Help craft protection strategies that are reflected in the concept of protection included in the base order and appropriate annexes and appendixes.
Supervise company-wide operations and plan training.
Supervised teams in support of security and installation law and operations.
Collect and analyze information for investigative purposes.
FOOD AND DRUG ADMINISTRATION FDA
IT Security Analyst/ Assessor - Contract December 2019 – Present
Conducted Certification and Accreditation (C&A) on major applications following the Risk Management Framework (RMF) from Categorization through Continuous Monitoring using the various NIST Special Publications in order to meet Federal Information Security Management Act (FISMA) requirements.
Developed SSPs, SARs, and POA&Ms which were presented to the Designated Approving Authorities (DAAs) to obtain the Authority to Operate (ATO).
Conducted security assessments on major applications, updated POA&Ms with findings, and monitored for remediation deadlines.
Provided weekly status reports on ongoing tasks and deliverables.
Performed risk assessments to identify the risk level associated with findings.
Reviewed artifacts regarding POA&Ms created by ISSO before closing.
Assisted in updates of IT security policies, procedures, standards, and guidelines according to department and federal requirements.
Helped with updating IT security policies, procedures, standards, and guidelines per the respective department and federal requirements.
Performed cloud and non-cloud system assessments.
Supported cyber security analysis by conducting Vulnerability Management, Security Engineering, Certification and Accreditation, and Computer Network Defense.
Monitored controls post authorization to ensure constant compliance with the security requirements.
Washington Tech Solution
IT Security Analyst/ Assessor April 2017 – December 2020
Performing daily ongoing (A&A) Assessment and Authorization projects in support of client security system
Performed Vulnerability Assessment using Nessus Scan/ACAS
Experience in system classification and categorization using RMF process to ensure system CIA. This ensures complaint security control selections and implementation for continuous system protection
Support client with creating SOP as evidence in the ongoing POA&M remediation process
Attend bi-weekly meetings to give updates on cyber- related changes
Performing daily ongoing (A&A) Assessment and Authorization projects in support of client security system
Conducting kick off meeting to categorize agency's systems per NIST requirements of Low, Moderate or High system
Conducting IT controls risk assessments that include reviewing organizational polices, standards, procedures and guidelines
Have broad Knowledge of the Risks Management Framework (RMF) process and its compliance using NIST 800 series publications and standards
Supporting client with creating SOP as evidence in ongoing POA&M remediation process
DC DEPARTMENT OF CORRECTIONS.
Cyber Security Analyst
Washington, D.C August 2015 – February 2017
Experience in system classification and categorization using RMF process to ensure system CIA. This ensures complaint security control selections and implementation for continuous system protection
Attend weekly meeting to help client with Risk Management Framework (RMF) step 2 security control tailoring process
Communicates effectively through written and verbal means to co-workers, subordinates and senior leadership
Possess a strong work ethic, positive attitude, great analytical skills, and team player
Performed Vulnerability Assessment using Nessus Scan
Assist with risk assessment and incident response procedures
Currently Supports NAWCAD 4.11.2 Cybersecurity divisions as an ISSE
Supported NAWCAD 4.11.4 Cybersecurity divisions as an ISSO
Attend weekly cyber team meeting (ISSO/ ISSE) to update shareholders on current findings
EDUCATION
Seton Hall University September 2020
Master’s of Science, International Relations and Diplomacy
University of Maryland University College May 2019
Bachelor of Science, Criminal Justice
Montgomery College, Maryland December 2015
Computer Science
University of Buea December 2010
Computer Sciences
ACTIVITIES
Army ROTC- University of Maryland August 2017- May 2019
Securities Analysis Club member January 2017 – January 2017
Participated on a 3-days networking trip to Wall- Street to learn about investing, stocks buying, from traders, investors and hedge funds CEOs and managers.
Analyze financial markets daily.
Intern at Osgood Center, Washington, DC July 01- August 20, 2016
Attended conferences at international organizations like the World Bank, IMF, and numerous embassies daily.
Debated with students from Germany, China, Japan, The Philippines on international issues: terrorism, trades, international politics.
SKILLS
Computer: Microsoft Office Suite, Word, PowerPoint, Excel.
NESUS SCAN.
Languages: Proficient in English, French, Pidgin, Bakossi