Lewis & Clark Community college

Illinois College

East Central College

C - EH CISSP Information Security Professional

Saint Louis, Missouri, United States

Various Security Consulting positions with small and medium size companies.

Self - Employed (Special Projects)

IT Consultant

- Designed and implementing overall Security Program (Growing from 2 personnel to proposed 8 personnel for Multi-Billion Dollar Company)•	Coordinated and validate periodic vulnerability and penetration testing•	Determined and designed security controls for Multi-Million Dollar system projects.•	Research and develop new policies & procedures•	Review and update existing policies & procedures•	Defined requirements, overall system objectives, and vendor management of Tripwire Enterprise, Log Center, and IP360

Self Employed

Senior Security Architect at National General Insurance

- Agency review lead for individual state agencies or local municipalities with as many as 7 reviewers supervised per review.•	Performed assessments of State and local municipality’s information systems that contain Federal Tax Information (FTI) to determine if they comply with the NIST 800-53 and the IRS Publication 1075. Performed IRS safeguarding assessments mandated by the IRC 6103(p)(4) tax code. These requirements include reviewing employee awareness programs, proper disposal, secure storage and computer security.•	Review policies and procedures documentation for compliance.•	Presented findings to agencies and delivered preliminary and final compliance reports. •	Answered Technical inquiries pertaining to technical issues with systems•	Performed IRS safeguarding requirements of the IRC 6103(p)(4) tax code. These requirements include employee awareness programs, proper disposal, secure storage and computer security.•	Assessed The Following Technologies, Mainframe, Firewalls, Core Routers/Switches, Oracle SQL, MS SQL, Object Oriented Databases, Windows XP-8.1 Workstation, Windows 2003-2012 Server, Linux Servers and Workstations, VPN Solutions, Virtual Environments, Gentax Software, Teradata Data warehouse, In House generated software and High volume printing.•	Assessed the Management, Operational, and Technical Policies and Procedures.•	Utilized automated vulnerability scanning tools (Secutor Prime/Nessus)•	Averaged 250-400 moderate to Critical findings per Review.•	Performed, documented, and created the Final report for the reviews on an average of 21 Days.•	Was Technical Lead for all state agencies during the 3-year onsite assessments, and answered or researched technical issues for those reviews.

Information Security Analyst Independent Contractor

Organization of Conservative Americans

General Windows's domain administration Including GPO(Group Policy Objects) creation/update, Organizations Unit Design and Implementation, user Account Creation, Modification and Disabling.Implemented DHCP and DynamicDNS.Implemented Security controls per IRS LSG(Lockbox Security Guidelines) and verified with the IRS Windows Policy Checker version 3.0-3.1.2Implemented McAfee Antivirus and Policy ManagerImplemented Userlock Workstation Access ControlImplemented Pointsec ProtectorImplemented Ghost Console server and Workstation Gold Images and BuildsCreated Workstation and server Gold Builds to meet IRS LSG(Lockbox Security Guidelines).Audited User Accounts per IRS LSG(Lockbox Security Guidelines)Created Reports for Corporate Compliance and worked with Policy and Process Creation to meet IRS LSG(Lockbox Security Guidelines)Worked with other groups to define and implement Security Controls and Procedures for current and new systemsResource for business line and IT for Security questions and concerns.Member of CIRT team.Performed End User Security Awareness, and Security Monitoring.

U.S. Bank

IRS Lockbox Security Officer

Audited Developer access to production systems.Developed remediation plans to reduce unneeded access.Implemented access changes or requested changes.

Apex Systems

Security Analyst

Responsible for the review, implementation, ongoing support, and enhancements for the various Security controls, technologies, standards, and infrastructure.Ensured Extranet/Internet Security procedures & quality standards are being fully met. Documented & escalated to the appropriate individuals, System Security related incidents, risks and issues. Performed as required network and application scans to determine vulnerabilities. Reviewed Firewall rule changes and approved or denied on level of risk.Maintained technical expertise in the appropriate areas. (Systems, Network, Programming, and Extranet/Internet Security)

Ajilon Consulting

Security Analyst Level II

Developed Contract Oral Presentation for Bid on Contract for USDA in St. Louis, MO.

IMTAS

Federal Certification and Accreditation for the USDA

On bench developing Security Services Offerings for Rapidigm; Configure the network Security layer to permit access to documents on a "need-to-know" basis to ensure authenticity and privacy.Install, configure, maintain and tune web server software. Create and maintain the web server directory tree structure. Determined the standard Multipurpose Internet Mail Extension (MIME) descriptors, and configure the web server to produce and handle these MIME descriptors. Install and configure supporting servers such as File Transfer Protocol (FTP), and Simple Mail Transmission Protocol (SMTP). Provided site usage metrics and reporting tools. Troubleshoot and fix common server problems.Reboot, restart, and restore the web site as needed.  Review, test, debug, and install Common Gateway Interface (CGI) scripts prepared by application developers, web masters, and others. Kept up-to-date on existing and emerging web technologies and standards. Assisted in the development of web site content including web pages and web-based applications.

Rapidigm

Security Practice Manager

Assessment for Lung Transplant Emergency Medical Records Application. Completed an end to end assessment for new application being developed. Performed Code Reviews Performed Security ScansReviewed System Configuration Documentation Reviewed Monitoring postureReviewed Database design

Washington University School of Medicine in St. Louis

Security Consultant/Hippa Audit

Web server administrator, general server administration.

Web Server Administrator

Created Documentation for the United States Department of Agricultures web farm architecture.  This is to bring the web farm into compliance with the Federal Law mandating Security Certification and Accreditation. Familiar with the following Federal Guidelines and Mandates.E-government Act of 2002, Title III, Federal Information Security Management Act (FISMA), Presidential Decision Directive 63, Policy on Critical Infrastructure Protection, OMB A-130 "Management of Federal Information Resources" Appendix III. NIST Special Publication 800-37, "Guide for the Security Certification and Accreditation of Federal Information Systems,".USDA OCIO CS-013 Cyber Security Guidance Regarding C2 Controlled Access Protection. Followed the federal documentation standards.Documented the Trusted Facility Manual, Security Features Users Guide, and supporting documentation.Interfaced between staff and Certification members.

TEKsystems

Responsible for the review, implementation, ongoing support, and enhancements for the various Security controls, technologies, standards, and infrastructure components inherent in the Web application architecture. Reviewed Sytems for compliance with HIPAA, and GLBA federal RegulationsMaintained appropriate monitoring techniques & audit procedures for detecting, reporting, and investigating breaches in Extranet/Internet Systems Security. Participated in & provided input into technical & application development efforts involving Extranet/Internet Systems Security & integrity issues. Established appropriate standards & procedures for Extranet/Internet Systems Security safeguards. Ensured Extranet/Internet Security procedures & quality standards are being fully met. Documented & escalated to the appropriate individuals, all System Security related incidents, risks and issues. Ensured currency of Extranet/Internet System software and related patches that provide controlled access and use. Reviewed Code changes for Extranet web applications for Security vulnerabilities. Performed as required penetration testing to determine vulnerabilities. Maintained SDLC Documentation and worked as Security focal for projects. Maintained technical expertise in the appropriate areas. (Systems, Network, Programming, and Extranet/Internet Security)

Edward Jones

Web Security Analyst Level II

Installed, configured, maintained, and tuned web server software/hardware, worked with and gave direction too Departments and Groups on E-Commerce initiatives and maintained Security structures.Configured the network Security layer to permit access to documents on a "need-to-know" basis to ensure authenticity and privacy.Performed Compliance audits and prepared required Security compliance reports. HP-UX System Administration and User Account Management.Used UNIX Shell and Perl Scripts for System Administration. Evaluated and recommended appropriate web server hardware and software based on customer requirements. Installed, configured, maintained and tune web server software. Create and maintain the web server directory tree structure. Determined the standard Multipurpose Internet Mail Extension (MIME) descriptors, and configure the web server to produce and handle these MIME descriptors. Installed and configured supporting servers such as File Transfer Protocol (FTP), and Simple Mail Transmission Protocol (SMTP). Provided site usage metrics and reporting tools. Troubleshot and fixed common server problems; analyzes and resolve network issues. Performed back up for system software, web server software, and user files, as needed. Rebooted, restarted, and restored the web site as needed Review, test, debug, and install Common Gateway Interface (CGI) scripts prepared by application developers, web masters, and others; assist users who are creating on line forms and databases in developing and debugging related scripts. Kept up-to-date on existing and emerging web technologies and standards. Assisted in the development of web site content including web pages and web-based applications.

Aviant

Defined and maintained desktop software deployment, and system integrity. Developed supporting applications and scripts in VB 6.0, Access, and REXX. Packaged applications, determined conflicts, and DLL management within the NT 4.0 environmentPackage Software Applications using EDM by Novadigm for enterprise distribution. Develop tools and reports for automation of software distributions. Assist and guide application owners to help determine packaging standards. Manage application and OS conflicts to allow packaged applications to work together. Maintain application versions and Desktop configurations. Maintain and upgrade package distribution servers.

Advanced Resources

Desktop Management

Investigated new technologies for recommendations for e-commerce wide area network, with a focus on data Security and Internet access. Developed configuration management of remote servers and access control. Served as Project Leader on network DMZ redesign for BUDNet Distributor network.Evaluated and recommended appropriate Security and infrastructure based on projects requirements. Developed and reviewed RFP's (Requests for Proposals). Troubleshot and fixed common server problems; analyzed and resolved network/remote access issues. Installed, configured, maintained, and tuned server software.Maintained application versions and Desktop configurations. Documented Systems and procedures End user support for existing Windows NT 3.5.1 Remote Servers. Kept up-to-date on existing and emerging server/network technologies and standards.

Aviant (Formerly MDTSC)

Systems Architect

Maintained Local Area Network (LAN) of 200+ users.Developed and maintained Security procedures, User Access, System Security. Directed support and all maintenance issues on servers, printers, and workstations. Developed upgrade plans for hardware and software. Evaluated and recommended appropriate server hardware and software based on requirements. Installed, configured, maintained, and tuned server software. Created and maintained the file server directory structure. Configured the network Security layer to permit access to documents on a "need-to-know" basis to ensure authenticity and privacy; may conduct Security compliance audits and prepare required Security compliance reports. Established and maintained user accounts. Provided site usage metrics and reporting tools. Troubleshot and fixed common server problems; analyzes and resolves network issues. Performed back up for system software, user files, and any other information as required. Rebooted, restarted, and restored server files necessary. Reviewed, tested, debugged, applications for deployment. Kept up-to-date on existing and emerging technologies and standards.

Timothy McGee CEH CISSP 3Kplus

Timothy McGee CEH CISSP 3Kplus