Nathaniel Orolfo
Details
Cyber Security
Purdue University Global
2020 : 2022
2022 : Present
Cybersecurity and Infrastructure Security Agency
Cybersecurity Specialist
2021 : 2022
Mass General Brigham
Information Security Engineering Intern
• Provide cyber risk analysis to University faculty and staff to aid in reducing the risk proposed by new and existing technologies, platforms, and systems implementation
• Work with users to educate, remediate and implement corrective actions and procedures to promote a culture of cyber security awareness
• Collaborate with the risk analyst team to ensure security, privacy, and alignment with the university’s technology goals and Federal and University compliance
2021 : 2021
University of Florida
Information Technology Security Analyst
• Utilized NIST SP 800-190 and other industry standards to guide container security policy for implementation across the Idaho National Laboratory
• Researched industry best practices for container security and tools that achieve those guidelines to create a proposal for policies when utilizing containers
• Consulted team members on the various applications of containers and provided valuable knowledge to the team to further the laboratory’s mission and relevant projects
2021 : 2021
Idaho National Laboratory
Risk Management Policy Intern
• IT help-desk assistant providing on-demand troubleshooting for faculty and staff to reduce interruption of workflow
• Completed a variety of projects related to technology upgrades throughout campus while maintaining an efficient project timeline
2018 : 2019
Santa Fe College
Information Technology Intern
About
Nathaniel Orolfo exemplifies having a passion for cybersecurity by passing the Certified Information Systems Security Professional (CISSP) exam and officially certified as an Associate of ISC2, while enrolled at Purdue University Global where he graduated with a Bachelors of Science in Cybersecurity and worked at the University of Florida as a Risk Management Analyst within the Information and Privacy Office.
He has interned as a Security Policy Analyst at the Idaho National Laboratory where he managed the creation of an application virtualization security policy utilizing NIST SP 800-190 and as an Information Security Engineering Full-Time Intern at Massachusetts General Brigham within the Threat and Vulnerability Management team, using Python and tools such as Tenable, Shodan, and Veracode.
He currently is employed as a Cybersecurity Specialist within the DHS Cybersecurity Service, where he is currently working as a Coordinated Vulnerability Disclosure Analyst within the Vulnerability Response and Coordination sub-branch of Vulnerability Management, CISA; safeguarding the nation’s critical infrastructure by working with public/private/tribal/territorial industry partners to responsibly disclose device/software vulnerability information and amplifying awareness through remediation guidance published in CISA’s ICS Advisories (ICSA).