IT Security Engineer Resume Samples

Description :

1. Migrated SAML Based SSO partners from CA Single Sign-On federation to Ping Federate 7.
2. Hands on CA SiteMinder primary Security Operations.
3. Used Ping API to deploy and create SAML changes.
4. Implemented Design Security Network on CA Single Sign On.
5. Good knowledge on Docker Security.
6. Configured and supported SAML based Identity & Service Provider connections Implemented openID and OAuth solutions using Ping Federate.
7. Implemented JWT token instead of traditional http headers.

Experience

5-7 Years

Level

Executive

Education

MS

Description :

1. Authored all project documentation.
2. Conducted the assessment of the current firewall technology and based upon those findings made recommendations for the initial vendor selection.
3. Developed criteria for 2'nd round of vendor selection.
4. Developed test strategy for test phase and conducted the actual testing.
5. Developed the strategy for firewall components that would be implemented.
6. Developed strategy, scope and objectives for pilot phase.
7. Set up and evaluated McAfee, ISS, Sygate and Zone Labs firewalls along with the enterprise management components.

Experience

5-7 Years

Level

Executive

Education

GED

Description :

1. Created Custom Adapter replacing SiteMinder 3.0 Ping Federate Identity Provider adapter.
2. Performed Proof of concept for OpenAM, Ping Access 3, and CA Single Sign-On R12.52.
3. Developed and delivered presentations as a technical expert.
4. Created and managed user accounts in Active Directory and Exchange server.
5. Performed onsite security audits at all branch locations.
6. Ensured that the IT Security Program documentation is kept current and in compliance with COV standards.
7. Monitored events/ system logs for Oracle applications servers, WebSphere and IIS.

Experience

2-5 Years

Level

Executive

Education

MS

Description :

1. Produced complete Certification and Accreditation (C&A) packages for certification and accreditation of National Critical Infrastructure High and Moderate systems.
2. Conducted Contingency Plan tests and exercises and assessed NIST SP 800-53 security controls resulting in a Risk Assessment, Security Assessment Report, and Plan of Action and Milestones (POA&M) to identify and manage remediation actions.
3. Performed remediation actions for failed security controls to correct inventory information, Performed security assessments, and guide teams in providing remediation actions.
4. Membered of a team that performed Independent Validation and Verification (IV&V) assessments for Mission Essential Infrastructure High and Moderate systems.
5. Conducted Security Test and Evaluation (ST&E) for multiple systems at various sites.
6. Supervised the design, analysis, and implementation of applications (apps) for mobile devices for ATSC Mobile Learning Infrastructure Established target dates and goals.
7. Supported estimating, forecasting, budgeting, tracking, and control of economics.

Experience

5-7 Years

Level

Junior

Education

BS In Computer Science

Description :

1. Reviewed security patches for Windows and Unix/Linux operating systems, Oracle, Java, and MS-SQL; consults with DBA/systems administrators to determine which can be applied.
2. Performed information security audits of sensitive IT systems for compliance with COV ITRM IT Security Policy SEC500-02, NIST standards, and ITRM IT Security Standard SEC501-07.
3. Conducted audits will be conducted in accordance with the IT Security Audit Standard SEC502-02.1.
4. Used Event Tracker log management tool to detect real-time security alerts and information events by analyzing the data and detect to respond to any security breaches or vulnerabilities.
5. Performed monthly audits of a database restore.
6. Performs quarterly audits/test restores of tape backups.
7. Performed systems security analysis and review controls; tests control to ensure they are working effectively and efficiently.

Experience

2-5 Years

Level

Executive

Education

Bachelors Of Science

Description :

1. Duties include the engineering and implantation of Developed a Cyber Security Program that places numerous information system controls, plans, processes, procedures, and countermeasures around the IHiS architecture to ensure the Confidentiality, Integrity, and Availability of this PHI and PII system.
2. Authored organization-level security plans, policies, procedures, standards, requirements, security technical implementation guides (STIGs), system security plans (SSPs), security test and evaluation (ST&E) plans, security assessment reports (SARs), and plan of action and milestones (POA&Ms) Engineered and implemented automated security network controls based upon DHS, USCG's and HIPAA policies and procedures in McAfee's Security Information and Event Management (SIEM), ePolicy Orchestrator (ePO), Virus Scan Enterprise, Host Intrusion Prevention System (HIPS), Next-Generation Firewall, Intrusion Protection System, Data Loss Prevention, Application Data Monitor, Web Gateway, Email Gateway, Rogue System Detector, Database Activity Monitor and Database Vulnerability Manager.
3. Engineered and implemented an Enterprise Log Management System that provides 100 percent coverage with real-time system logging, event analysis, log correlation, and incident alerts/alarms.
4. Ran weekly security patch vulnerability assessments and PCI-DSS compliance scans through Nessus's System Vulnerability Scanner Provide external penetration testing multiple times a weak to constantly test and evaluate our countermeasure effectiveness Federal Emergency Management Agency - Security Operations Center.
5. Assisted in the development of security standards, procedures, and guidelines for IT security controls and policies.
6. Evaluated current and new business processes for adherence to industry-standard security practices, such as PCI, and corporate security policies Coordinated periodic risk assessments, penetration testing, and vulnerability assessments.
7. Developed and maintained baseline security configurations for operating systems, applications, networking, and telecommunications equipment.

Experience

5-7 Years

Level

Executive

Education

Bachelors

Description :

1. Reviewed server event logs for any irregularities.
2. Maintained software licensing.
3. Ran baseline audits on all workstations and servers to discover vulnerabilities.
4. Worked to mitigate any issues found.
5. Audited each file share and their respective files/folders for proper permissions.
6. Located any misplaced items and ensure the owner moves to the correct directory.
7. Monitored computer networks for security issues.

Experience

5-7 Years

Level

Executive

Education

A.A.S. In Computer Science

Description :

1. Oversaw, reviewed, audited, modified, and implement the organization's IT security policy to secure and satisfy business needs.
2. Complied with NCUA, GLBA, and government regulatory.
3. Assessed and prevent new security threats, risks, and vulnerabilities that would jeopardize the organization.
4. Led numerous projects and work with vendors to deliver solutions for business needs from start to finish.
5. Participated in the designing and planning for Business Continuity Plan and Disaster Recovery Assist other department and business units to securely integrate new application and system to exist infrastructure Educate and train IT Help Desk and business leader on security topics and prevention.
6. Configured, maintained, and secured the organization's network infrastructure by utilizing Cisco switches and routers, Cisco ASA firewall, Cisco IDS/IPS, Cisco Web Security, and Cisco Email Security.
7. Configured, maintained, and secured the organization's endpoints by utilizing McAfee ePolicy Orchestrator to implement McAfee Endpoint Protection Suite, DLP, and Windows AD/Group Policy implementation.

Experience

2-5 Years

Level

Junior

Education

GED

Description :

1. Used Splunk, Nessus, and Active Administrator to monitor networks for security vulnerabilities.
2. Maintained and monitored Websense server.
3. Monitored Palo Alto firewalls for suspicious activity.
4. Managed Sophos HBSS.
5. Ensured NIST compliance.
6. Created security training materials for end-users.
7. Investigated security events and incidents.

Experience

5-7 Years

Level

Executive

Education

Master Of Arts

Description :

1. Assisted in defining, implementing, and enhancing operating system security requirements, policies, procedures, and tools to assure the confidentiality, integrity, and availability of corporate IT resources throughout the organization.
2. Identified and implemented security requirements, integrate security programs across disciplines, create Information Security architecture and design, identify and mitigate security risks and vulnerabilities, maintain security plans and policies, assess new security technologies / threats, and recommend solutions, and review security incident response policies and procedures.
3. Collaborated extensively with international and local team members, and third-party vendors to define needs, resolve issues, and ensure safe computing.
4. Project Manager for the development, planning, testing, and implementation of Two Factor authentication across corporate email and VPN.
5. Project Manager for the development of Vulnerability Management program ensuring all identified vulnerabilities was mitigated and documented acceptance for any non-mitigated vulnerabilities.
6. Installed and configured test environment for the research and development of various open-source security solution tools that were evaluated for increasing the companies security posture.
7. Project Lead for updating, enforcing, and auditing security policies, procedures, and SOP's to ensure compliance and accuracy with our current security architecture.

Experience

2-5 Years

Level

Executive

Education

Master Of Science