Scott S.
Details
2019 : Present
United States Transportation Command
Cybersecurity Scorecard Manager
Lead registrar for the United States Air Force Ports, Protocols, and Services Management (PPSM) team. Serves as subject matter expert advising on PPS utilization on approximately 775 network enclaves and information systems spanning the Air Force cyber portfolio. Protects data end-to-end by ensuring communications protocols and data services in use on Air Force Information Systems are registered, controlled, and regulated, with a focus on least functionality while still maintaining interoperability with the DoD Information Network (DoDIN). Contract Task Lead responsible for a 9-person team providing support to Air Combat Command (ACC) in Computer Security (COMPUSEC), TEMPEST (EMSEC) and PPSM functional areas.
2019 : 2019
CDO Technologies, Inc.
Cyber Security Lead Analyst IAM III / Contract Task Lead
Lead registrar for the United States Air Force Ports, Protocols, and Services Management (PPSM) team. Serves as subject matter expert advising on PPS utilization on approximately 775 network enclaves and information systems spanning the Air Force cyber portfolio. Protects data end-to-end by ensuring communications protocols and data services in use on Air Force Information Systems are registered, controlled, and regulated, with a focus on least functionality while still maintaining interoperability with the DoD Information Network (DoDIN). Subcontract Task Lead responsible for a 3-person team providing support to Air Combat Command (ACC) in TEMPEST/EMSEC and PPSM functional areas.
2017 : 2019
Odyssey Systems
Cyber Security Analyst / Subcontract Task Lead
Provide cyber security and privacy analysis and consulting throughout the security assessment and compliance lifecycle process. Responsibilities include planning, developing, finalizing, and continuous monitoring of cyber security and privacy policies, programs, compliance artifacts and/or, standards, in support of government and industry security compliance, systems accreditation and management. Manage and/or administer the documentation, validation and accreditation processes necessary to assure systems meet security and privacy requirements. Conducts assessment of the effectiveness of an organization’s IT security and privacy training program, including conduct of social engineering exercises to ensure training remains consistent with current cyber security and privacy threats and policies, and assists in achieving full compliance with any/all laws and regulations.
2017 : 2017
Booz Allen Hamilton
Cyber Security Policy and Compliance Analyst
Presently serves as a Cyber Security Manager (DoD 8570 IAM / IAT Level III), leading four Air Force-wide Cyber Security collaboration environments (SharePoint Administration) that deliver Information Assurance (IA) and Information Systems security policy and governance (COMPUSEC, EMSEC / TEMPEST, PPS, PKI) to over 40K personnel across the globe. Directs the Air Force's largest virtual Information Assurance / Cyber Security Field Support program which provides digital risk mitigation policy, directive, and procedural clarification to over 180 field and branch offices. Ensures compliance with Federal security policy guidelines during the planning, implementation, execution, sustainment and safeguarding of cyberspace programs. An expert in program management, routinely coordinates with senior leadership in the Department of Defense, Air Staff, Major Commands and system program offices to ensure national Information Assurance directives compliance. Additionally, performs organizational-level security program management providing Industrial Security, Physical Security, and Information Security guidance to 250+ employees.
2014 : 2017
United States Air Force
Program Director, Cyber Security Field Support
About
- 23 years of proven security program management expertise developing the personnel and executing the resources that safeguard information and data resources across the cyber spectrum
- Highly trained cyber security analyst with specializations in the fields of computer, network, information, physical, and industrial security (DoD 8570 IAM / IAT Level III)
- Expert in: Project Management, Information Assurance (IA) / Cyber Security, Computer Security (COMPUSEC), Ports, Protocols and Services Management, Information Security (INFOSEC), Emissions Security (EMSEC / TEMPEST), Communications Security (COMSEC), Public Key Infrastructure (PKI), Department of Defense (DoD) Policy, Business Continuity Management (BCM), Disaster Recovery, Security Technical Implementation Guide (STIG), National Institute of Standards and Technology (NIST) standards, Federal Information Security Management Act (FISMA), Access Control, End Point Security, Mobile Technology security, Active Directory, SharePoint, Word, Excel, PowerPoint
- Proficient in: Risk Management Framework (RMF) / Certification and Accreditation (C&A), Cloud, Internet of Things (IoT), Network Defense, Apple OS X, Google Android, Microsoft Project, Retina Vulnerability Scanner, Vulnerability Management System (VMS), Common Vulnerabilities and Exposures (CVE)
- Active Security Clearance / 21+ year Air Force Veteran, Air Force Specialty Code 3D073 - Cyber Surety Craftsman