Information Security Analyst - RMF & NIST Expert

LINUS BRANDEN GEDZIA

***************@*****.*** 774-***-****

SECURITY CLEARANCE

Active Secret Clearance – U.S. Department of Defense SUMMARY

Information Security Risk Management expert with focus on FISMA, System security evaluation, validation, monitoring, Risk assessments and Audit engagements. Accomplished Security Analyst/assessor with a 2-3 years professional track record of successfully assessing information security risks and coordinating remediation efforts. I’m looking to apply my skills and expertise to help achieve Enterprise-wide information risk goals and objectives. Proven ability to lead and direct, solve problems creatively, and make strategic decisions in fast paced environments. Effective team leader, constantly empowering team members through coaching, guidance and motivation.

AREAS OF EXPERTISE

• FIPS 199/ FIPS 200

• NIST Special Publications (NIST SP) Series

• Security Categorization (SC)

• Continuous Monitoring (CM)

• System Security Plan (SSP)

• Security Assessment Reporting(SAR)

• Plan of Action & Milestones (POAM)

• Certification & Accreditation (C&A)

• Vulnerability Management

• NESSUS scans

• Xacta Tool

PROFESSIONAL EXPERIENCE

IRON NET DATE JANUARY 2023

Information Security Assessor

• Conduct assessment of security control selections on various Moderate impact level systems to ensure compliance with the NIST SP 800-53a

• Utilize the Risk Management Framework (RMF) processes as such system categorization, security controls implementation, security assessment plan and contingency plan to safeguard the information system.

• Request and review vulnerability scans as well as monitor and track remediation progress in Xacta tool.

• Review and update System Security Plan (SSP), System Security test and Evaluation (ST&E) and the Plan of Actions and Milestones (POA&M) and ensure FISMA Compliance.

• Conduct assessment per NIST SP 800-53a and document findings and remediation actions in the POA&M.

• Participate in weekly meetings to discuss the status of the assessment process

• Monitor security controls post-authorization to ensure continuous compliance with security requirement.

EDGIO DATE DECEMBER 2023

Helpdesk Support Specialist

• Performed technical troubleshooting with an enterprise environment including systems crashes, slow-downs and data recoveries

• Performed ongoing security monitoring of all systems for intrusions. Page 2

• Responsible for basic installation and maintenance of all company’s systems and hardware

• Maintained log and/or list of required repairs and maintenance and provided network accounts and passwords as required

• Provided Tier 1 & 2 support via calls, emails, in person interactions to employees with supported software needs.

• Provided remote administrated desktop and software support using Remote Desktop workstation US Army Soldier DATE April 2024

• Completed U.S. Army Basic Combat Training, developing discipline, teamwork, leadership, and strong work ethic in high-pressure environments.

• Advanced Individual Training (AIT) successfully completed in CBRN (Chemical, Biological, Radiological, and Nuclear Defense).

• Trained in hazardous material safety, contamination control, and radiological awareness procedures.

• Maintained strict safety protocols and regulatory compliance when handling potentially hazardous environments.

• Demonstrated strong attention to detail, responsibility, and adherence to procedures, skills critical for healthcare and laboratory environments. EDUCATION

· NORTH HIGH SCHOOL 2024

· Quinsigamond Community College 2025

CERTIFICATION & SKILLS

CompTIA Security+ candidate

Operating systems: Linux, Windows 7, 8, 10, Active Directory Languages: Bash, SQL

AFFILIATIONS & CONFERENCES

RED CROSS Best Performance Volunteer (2025)

Contact this candidate