Embed Size (px)
Citation preview
2
Greetings!WearepleasedtointroduceourSpringcohortoftalentedcybersecuritycandidates.Fifteen(15)technicalprofessionalswerechosenfromover700applicantsandarecurrentlyenrolledinourhands-oncybersecuritytrainingprograminCrystalCity,Arlington,Virginia.Manyofthesecandidateshaveactivesecurityclearances.HackEdwascreatedtosolvetwoproblemshelpingemployersfindtopcybersecuritytalent,andhelpingtechnicalprofessionalsadvanceinthecybersecurityindustry.Wearealsofocusedonbringingmorewomen,minorities,andveteransintotheindustry.Ourprogramisa7week,hands-on-keyboardcybersecuritytraining,certification,andjobplacementprogram.Itisheldfourtimesperyear.Ourcurriculumisgamifiedandour‘operatives’workonteamsinareal-worldtrainingenvironmentdesignedbyIndustryVeteranstoensureuptodateactionableskillsetsarebroughttoyourteams.WeencourageourstudentstopursueI.T.certifications,suchastheSecurity+,CEH,GPEN,andtheOSCP,andsomealreadyholdsomeoftheindustry-recognizedcertificationsrequiredbymostclientsinthisspace. Weinviteyoutorecruitfromourprogramaswesupportyouwiththesourcing,vettingandtraining,allowingyoutofocusontheinterviewingandhiring.Ouraimistoprovideourhiringpartnerswithjob-readycandidateswhoaretrainedandreadytodefendandsecureyourclientsandyourcompanynetworkfromdayone.ItisFREEtorecruitfromHackEd.Thereisnolongerafeewhenhiringfromus!Tosetupinterviewswithacandidate,ortolearnmore,simplyemailusatinterviews@hackeducate.com.Youcanalsouploadanyadditionalopenreqsacrossalllinesofbusinessat:https://www.hackeducate.com/hireThankyouforyoursupport!JonFerris,CEOJulieMosallem,PartnershipsManagerRachelChen,DirectorofOperations
3
Our current list of free hires: � Bekhzod Umarov………………………………………………………………………………………….4 Carter Thomas…………………………………………………………………………………………....6 Chad Bright……………………………………………………………………………………………......8 Cynthia Debisschop……………………………………………………………………………….........10 Gabrielle Bozier………………………………………………………………………………………....14 James Anderson………………………………………………………………………………………...17 James Dasinger…………………………………………………………………………………………20 Jason Reyes………………………………………………………………………………………….....23 Jhanina Santiago……………………………………………………………………………………......24 Nicole Cooper……………………………………………………………………………………………26 Omer Sheikh..……………………………………………………………………………………..........31 Ozoda Usmanova………………………………………………………………………………….……33 Srinath Nandula…………………………………………………………………………………………35 Sudhakar Kumar………………………………………………………………………………………..36 Victoria Croffie………………………………………………………………………………………......37
4
Bekhzod Umarov
Passionate Computer Science professional with 10+ years of experience in programming. Competencies in: Python/C/C++, Linux, cybersecurity, machine learning, and data analysis. Looking to obtain a rewarding position in cybersecurity. EDUCATION - PROFESSIONAL EXPERTISE Education: B.S. Computer Science, University of New Haven Certifications: OSCP (in progress) CRLA International Tutoring Certificate, Level 1&2
Programming Skills: C/C++, Python, SQL, Java, C# & .NET, VBA, PHP, HTML &
CSS, Javascript& jQuery, XML Expertise: Linux System Administration, Web Development, Cryptography,
Cyber Security, Reverse Engineering, Software Design Patterns, Agile Methodologies,Neural Networks & Deep Learning, Data Analysis
Languages: Russian (fluent), Uzbek (fluent)
RELATED EXPERIENCE Industry Competitions
● Inter-Collegiate PenTesting Competition (CPTC) by RIT● CTF hacking competition by RC3@RIT● AlexCTF catch the flag competition
RESEARCH - PROJECTS
● Facial Recognition using Deep Convolutional Neural Networks on LFW and Look alikePeople datasets with 95.56% accuracy rate. URL: https://bekhzod0725.github.io/assets/facial_recognition_paper.pdf
● Bank Password Policies security research exposing weak policies on 5 banks with case insensitive passwords. URL:http://www.securitymagazine.com/articles/86965-research-finds-bank-password-policies-often-weak
5
PROFESSIONAL EXPERIENCE
Senior System Administrator June 2014 - Present Center for Learning Resources, UNH Responsible for technology, computer lab administration, security, and availability of software for students.
● Proposed and developed S.T.A.T. (Smart Tutoring Analysis Tool), a new academic management system to optimize administrative tasks within the department and use data analysis methods for statistical reports. Built in Python+Django.
● Developed individually customized student email outreach software in VBA and MS SQL
● Tutored Computer Science and Math courses.
Lead Software Developer May 2012 – January 2013NETech, Tashkent
● Lead Developer for MBank (iOS version) Mobile Banking App Project.● Managed the “MDnevnik” project - new school assignment management system for the
country. Developed in PHP &CodeIgniter.● Developed daemon based GSM - SMS outreach program for the School System in
Python.● Mentored new employees and interns.
6
Carter Sutherland Thomas
[email protected] EDUCATION HackEducate–CrystalCity,VA April2017–present
• Cyber Security training program focused on a rigorous Penetration Testing curriculum including Red Team and Blue Team operations
VirginiaPolytechnicInstituteandStateUniversity–Blacksburg,VA. • B.S., Industrial & Systems Engineering May 2013
EMPLOYMENT HISTORY Cyber Security Engineer, Business Operational Concepts, LLC – Washington, DC October 2016 – March 2017 United States Office of Personnel Management (OPM) Client Site
• Member of OPM’s IT Security Operations division serving as a Tier III Security Engineer on the Analytics team
• Worked to administer, operate, and maintain enterprise security tools such as RSA Security Analytics/NetWitness, Bit9 Carbon Black Response, RSA Archer, and HP ArcSight (SIEM)
• Created advanced ArcSight content such as Filters, Rules, Dashboards, Active Lists, etc for effective security event visibility and incident response
• Independently troubleshot and resolved high profile security issues in a fast paced environment • Effectively communicated escalations and statuses to upper management
IT Consultant, CGI Federal –Alexandria, VA. June 2013 –September 2016 United States Patent & Trademark Office (USPTO) Client Site
• Served as Functional Lead on USPTO’s e Acquisitions project streamlining Procure-to-Pay lifecycle via system integrations
• Responsible for Momentum COTS product software configurations to meet and enhance client business needs
• Interfaced with client and key stakeholders on a regular basis • Web Service testing using SoapUI • Worked directly with development team to design WSDL endpoints to integrate with third party
system • Led team of junior members in the completion of project tasks in a timely manner • Assisted development of Procedural Language/Structured Query Language (PL/SQL) email
notification program and Oracle SMTP utility • Worked to implement an upgrade of the Momentum software suite
IT Support, Virginia Tech Department of Engineering Education – Blacksburg, VA September 2011 – May 2013
• Completed hard disk drive wipes using DBAN to ensure removal of sensitive information • Performed System Administrator tasks for small computer lab • Set up Cisco server and drives learning RAID concepts • Maintained Organizational Units for department domain using Active Directory • Prioritized service requests and troubleshooting tasks to ensure efficiency
IT Student Assistant and Administrative Support Summer 2010; Summer 2011; Summer 2012 Virginia Commonwealth University School of Engineering – Richmond, VA.
• Developed project management skills
7
• Deployed software/licenses to lab computers • Gained experience with computer imaging and image deployment
PROJECTS Home Network Security and Penetration Testing December 2015 – Present
• Set up home testing environment to practice hands-on security testing on own devices • Wireless password dictionary attacks / prevention strategies • Used Wireshark for WiFi packet capture, analysis, and decryption • Bash scripting and task automation • WiFi packet sniffing and packet injection using Aircrack-ng suite • Used Nmap to scan for open ports, services, and information gathering • Metasploit Framework using msfconsole for assessment and exploitation payloads
Raspberry Pi Home Storage June 2015 – August 2015 • Independent project using a Raspberry Pi device as a storage server for my home network • Configured Wireless Interface settings • DNS troubleshooting and resolution • Installed SeaFile server and configured port access for device connection
CERTIFICATIONS & TRAININGS HP ASE –ArcSight Analyst V1 Feb 2017
• Advanced ArcSight ESM content building to find and correlate security events CompTIA Security+ June 2016
• Network security and risk management Certified Scrum Master (CSM) May 2015
• Agile software development methodology Six Sigma – Yellow Belt Certified April 2012
• Process improvement methodology SKILLS
• SQL • PL/SQL • Data Analysis • SoapUI • Agile Methodology • Project Management • Technical Writing • Enhanced critical thinking and problem solving • Leadership experience in a cross functional environment • System Integrations • Linux / Kali Linux • Bash scripting
8
Chad D. F. Bright
Dedicated Information Systems professional with a current TS/SCI clearance versed in varying technologies seeking a Cybersecurity Analyst position where I can leverage my 17 years of broad IT experience.
CERTIFICATIONS:
CompTIA Cybersecurity Analyst + (in process) CE
CompTIA - Security + CE
EMCISA Information Storage Associate - EMC2
Backup Academy Certified Professional – Veeam Software
TRAINING & EDUCATION:
• Hack Educate, Crystal City, VA Expected May 2017 Immersive, 7 weeks, hands-on-keyboard cybersecurity training course
• Hewlett-Packard Education Services, Herndon, VA May 2008 ITIL Foundations for IT Service Management
• George Mason University, Arlington, VA September 2007 – March 2008 Windows Server 2003 Microsoft Certified Systems Engineer Course
• Kaplan University, Ft. Lauderdale, FL June 2010 Associates of Applied Science in Computer Information Systems. Alpha Beta Kappa National Honor Society
EXPERIENCE: RAI-Government Services,Systems Administrator Specialist September 2016 – May 2017
• Responsible for the operations and user support of the Integrated Exploitation Capability (IEC) system located at a customer facility.
• Assisted with system and application patches and upgrades for the system. CyberData Technologies Incorporated,Senior Windows Engineer January 2016 – May 2016
• Met customer requirements to apply security updates and patches via SCCM to workstations and servers within given deadlines.
• Attended customer meeting to gather technical requirements for new projects. General Dynamics –Information Technology, Principal Systems Engineer June 2013 – July 2015
• Installed WSUS server for security patch deployment. • Created Group Policies for domain security settings and user configuration.
QVine Corporation, Systems Engineer May 2011 – March 2013 • Migrated seven Windows 2003 domains to three Windows 2008R2 domains. • Managed Active Directory and Group Policies for security and administrative updates.
Hewlett-Packard, Technology Consultant III April 2010 – February 2011 • VMware administrator – Installation, configuration and support of vSphere 4. • Configured vSphere 4.0 environment for developers use.
9
Innovative Technology Systems (ITS), Senior Systems Engineer June 2009 – April 2010 • Configured zoning on CISCO MDS 9500 series switches. • Launched a NetApp SANscreen evaluation and deployment.
EMC², Senior Implementation Specialist November 2007 – June 2009
• Created and modified NetBackup Policies for required retention periods. • Maintained tape rotation and backup requirements.
Perot Systems - Government Services, LAN Support Technician June 2007 - November 2007 • Provided Tier I and II support for user base on Microsoft Windows network. • Data Transfer Officer; responsible for the transfer of media to different networks.
Multimax INC,System Administrator January 2006 – June 2007 • Created Veritas Netbackup Installation and Disaster recovery guide for multiple sites. • Responsible for user requested data restores.
General Dynamics,Field Representative Specialist January 2005 – January 2006 • Initial point of contact for customers to report problems via telephone, web, or in person. • Updated, resolved, and provided guidance and status of tickets relating to system
outages. United States Navy, Information Systems Technician January 2000 – August 2004
• Created backup policies for required retention periods and disaster recovery. • Trained and supervised four personnel in maintenance and operation of Windows NT
network. • Responsible for lifecycle management of hardware, software, peripherals, and office
supplies for the IT infrastructure.
AWARDS: • Certificate of Appreciation for outstanding professionalism and unwavering dedication with
providing critical support for the 2008 Beijing summer Olympics • Naval Achievement Medal for complete rebuild of HP UNIX server • Commanding Officer's Letter of Appreciation for exceptional professionalism • National Defense Service Medal for service during Operation Enduring Freedom • Navy Good Conduct Medal for faithful, zealous, and obedient service
10
CYNTHIA A. DEBISSCHOP, PH.D.
[email protected] Analytical and tech-savvy Interdisciplinary Engineer with demonstrated success serving clients in government, industry, and academia. Applies strong computational skills and knowledge across multiple domains to tackle complex engineering sciences and information systems problems. Purposeful team member who synthesizes information from disparate sources and provides objective recommendations to achieve strategic and operational goals. Core competencies include: Information Systems Security | Computer Programming | Data Analysis | Modeling & Simulation
Process Engineering | Cyber-Physical Systems | DataScience | Leadership & Communication
PROFESSIONAL EXPERIENCE AMERICAN INSTITUTE OF CHEMICAL ENGINEERS NATIONAL CAPITAL SECTION Executive Committee Member (Volunteer) Washington, DC (January 2012-Present)
• Performed outreach, program planning, financial reporting, and budgeting in progressive leadership roles as treasurer, vice chair and program chair, and executive committee chair for group of over 1000 chemical engineers in the Washington, DC area. Managed team of 13 leaders. Organized cyber security program event and embassy meetings hosted by Belgium, Switzerland, and France in U.S. that highlighted international accomplishments in energy.
ENGINEERING MATHEMATICS TUTORING SERVICES Owner/Founder Potomac, MD (January 2004-May 2009, February 2017-Present)
• Conducted over 50 one-on-one tutoring sessions annually in Differential Equations, Calculus, Geometry, and Algebra for clients attending top public high schools and colleges in the Washington, DC area. Achieved maximum evaluation score from all online clients.
HOWARD UNIVERSITY, DEPARTMENT OF CHEMICAL ENGINEERING Adjunct Professor Washington, DC (August 2015-May 2016)
• Led classes of 30 junior-level students in CHEG 301 Fluid Mechanics and CHEG 302 Heat Transfer. Emphasized process safety using current events and real-world applications.
• Designed and delivered 60 lectures incorporating engineering fundamentals covered in 400 pages of transport processes text. Developed all course materials. Graded 180 examinations, 540 weekly engineering problem sets, 8 Python-based computational
11
fluid dynamics projects, and 10 MATLAB heat exchanger design projects. Achieved outstanding teaching evaluation.
CNA, INSTITUTE FOR PUBLIC RESEARCH Research Analyst Washington, DC (June 2009-December 2013)
• Extracted and analyzed key operational constraint information from legacy data repository of over 10,000 standard operating procedures documents as a federal government consultant.
• Developed mathematical algorithm to translate text instructions into a detailed
graphical representation of a geospatial route for prototype software development. Outlined team findings in an award-winning paper with other international databases group co-authors.
• Surveyed satellite-based and radar-based sources of spatiotemporal data from legacy
and new government systems. Delivered briefing materials and provided recommendations to government leaders to generate a common, official spatiotemporal information picture.
OLD DOMINION UNIVERSITY, DEPARTMENT OF MATHEMATICS AND STATISTICS Assistant Professor Norfolk, VA (July 2001-December 2003)
• Established interdisciplinary research program in computational applied mathematics specializing in materials science and partnering with NASA Langley Research Center.
• Investigated self-similar behavior of nonlinear surface velocity and insoluble surfactant concentration near rupture of a thin film interface for Dow Corning Corporation.
• Taught and designed materials for five course sections: MATH 307 Ordinary Differential Equations, MATH 401/501/691 Partial Differential Equations (graduate and undergraduate levels), and MATH 693 Engineering Analysis III (graduate level).
MG INDUSTRIES (NOW AIR LIQUIDE), SPECIALTY GASES DIVISION Technical Service Representative/Project Engineer Morrisville, PA (August 1993-August 1995)
• Solved technical problems for entire Specialty Gases Division of more than 2000 internal employees and external retail store customers. Evaluated new and existing specialty gas mixtures and gas equipment for specific customer applications. Executed conceptual design and implementation of capital projects involving high purity gas systems, including high pressure gas fill that increased annual revenue by $2 million.
12
LEADERSHIP AND AWARDS Invited Panelist – Women’s Initiatives Committee, AIChE Spring Meeting (2016) Emerging Technologies Chair – Digital Avionics Systems Conference (2013-2014)
Best Paper Award Winner – David Lubkowski Memorial, Advanced Avionics Track (2011) Industrial Postdoctoral Fellow – University of Delaware (2000-2001) Graduate Fellow – National Science Foundation Graduate Research Fellowship (1996-2000)
EDUCATION
Ph.D. (June 2000) and M.S. (June 1997) in Engineering Sciences and Applied Mathematics Northwestern University, Evanston, IL
Thesis: Mathematical Aspects of Frontal Polymerization
B.S. (June 1993, Summa Cum Laude, First Honors) in Chemical Engineering Drexel University, Philadelphia, PA Distinction: Chemical Engineering Centennial Scholar [one selected] Professional Certifications (In Progress) Hack Educate (HackEd) Hands-On-Keyboard Cybersecurity Program Certified Information Systems Security Professional (CISSP)
COOPERATIVE EDUCATION MOBIL OIL CORPORATION (NOW EXXON MOBIL CORPORATION) Refinery Process Engineer Paulsboro, NJ (September 1991-March 1992)
• Developed two crude unit preheat exchanger monitoring programs in Microsoft Excel that incorporated real-time analysis using on-line data, to troubleshoot preheat exchanger fouling and maximize furnace efficiency. Increased furnace efficiency by 20 percent. Exclusively offered permanent full-time employment and corporate monetary award for pioneering heat transfer analysis that supported keeping the Paulsboro Refinery facility in operation.
Research Process Engineer Princeton, NJ (September 1990-March 1991) • Compared predicted data from proposed distillation tray flood models to
Fractionation Research Incorporated (FRI) experimental data using regression analysis in Mathcad, for four different FRI datasets representing jet and down comer flooding. Improved down comer flood model predictions by 25 percent.
13
• Completed parametric studies using process simulation and incorporated results into an expert system to troubleshoot debutanizer flooding in the Paulsboro Refinery gas plant.
SELECTED PUBLICATIONS • Christian Pschierer, Brian Gilbert, Cynthia DeBisschop, and Sam Van der Stricht.
Aerodrome Mapping Databases Supporting Taxi Routing Functions. IEEE Aerospace and Electronic Systems Magazine 28:4-13, 2013.
• Lydia L. Lewis, Cynthia S. DeBisschop, John A. Pojman, and Vladimir A. Volpert. Isothermal Frontal Polymerization: Confirmation of the Mechanism and Determination of Factors Affecting the Front Velocity, Front Shape, and Propagation Distance with Comparison to Mathematical Modeling. Journal of Polymer Science Part A: Polymer Chemistry 43:5774-5786, 2005.
• Lydia L. Lewis, Cynthia A. DeBisschop, John A. Pojman, and Vladimir A. Volpert. Evolution of Isothermal Polymerization Fronts via Laser Line Deflection and Predictive Modeling. Nonlinear Dynamics in Polymeric Systems, Chapter 14, ACS Symposium Series 869:169-183, 2003.
• C.A. Spade and V.A. Volpert. Linear Stability Analysis of Non-adiabatic Free-Radical Polymerization Waves. Combustion Theory and Modelling 5:21-39, 2001.
• C.A. Spade and V.A. Volpert. On the Steady-State Approximation in Thermal Free Radical Frontal Polymerization. Chemical Engineering Science 55(3):641-654, 2000.
• C.A. Spade and V.A. Volpert. Mathematical Modeling of Interfacial Gel Polymerization for Weak and Strong Gel Effects. Macromolecular Theory and Simulations 9(1):26-46, 2000.
SELECTED PRESENTATIONS • Invited Speaker, “Cyber-Physical Attacks.” Graduate and Undergraduate Mentoring
Seminar, Department of Chemical Engineering, Drexel University, Philadelphia, PA (2017) • Invited Speaker, “Evolution of Chemical Engineering.” ExxonMobil American Institute of
Chemical Engineers (AIChE) Student Awards Dinner, Howard University, Washington, DC (2016)
• Speaker in Competition for Best of Conference Award, “Aerodrome Mapping Databases Supporting Taxi Routing Functions.” Digital Avionics Systems Conference, Seattle, WA (2011)
14
Gabrielle Bozier, CISSP [email protected]
Experienced, versatile, diverse cybersecurity professional looking to leverage private and public sector with a world-class consulting firm who develops and designs resilient strategies that address rapidly evolving business needs, cyber threats, IT security risks while presenting clients the business implications and trade-offs for the optimal investment needed to sustain operational success. Strong oral and written communications skills. Open to relocation and working with a range of industries and in foreign and/or domestic locations.
Work Experience: National Security Agency - Chief of Staff Mar 2004 – Apr 2017 Ft. Meade, MD
• Chief of Staff for a 500-person division within the Operations Directorate with personnel working in various physical locations around the world; responsible for administrative health of organization, including managing $25M budget and 12 person direct staff that provided oversight of promotions, recognition and awards for civilian, military and contractor personnel, provided organization responses related to 2013 national security incident, implemented communications plans, standard operating procedures, deployed training programs, coordinated with Agency security personnel for travel and safety to sensitive locations, collaborated with installation and logistics teams to manage office space needs for rapidly growing organization
• Computer Network Operations project lead for red team on a number of efforts including a multi-Agency tabletop open source vulnerability exercise that leveraged prior private sector experience, delivered oversight and compliance, classification and SIGINT policy guidance for the organization authorized to execute CNE activity to support on-net operations, troops in theatre and engagement with various stakeholders, led technical teams that included network security specialists, exploit development, forensics analysts malware analysts, etc., Authored documents that outlined and supported inter-Agency and 2nd Party collaborative efforts, Developed and designed CNE overview briefings delivered by Senior Executives to internal and external stakeholders, Served as ISC(2) exam administrator for the Agency
• Cyber Lead for Export Control, managed team that successfully reviewed more than 5,000 proposals, license requests, general correspondence, vendor disclosures from defense contractors and cyber firms interested in delivering technical services and solutions (SIGINT and ELINT systems) for potential sales to foreign government end-users, collaborated with Senior Executives in key mission areas throughout the Agency to provide NSA export positions to the Defense Technology Security Agency, Dept of Commerce and State Dept, HPSCI, SSCI members, Established Agency processes for all cyber related export control reviews; deeply familiar with cyber related export policies
• Communications Director for the Equal Employment Opportunity and Diversity organization, Developed and implemented communications strategies/campaigns to support special observances, promote events and completion of mandatory training, Authored correspondence (e.g., speeches, workforce messages, presentations for Senior leadership, talking points) on behalf of EEOD Director and Director of NSA that communicated Agency’s diversity and inclusion goals and objectives. Managed Employee Resource Group Program, leveraged collaborative technology on Agency’s intranet to improve workforce engagement, respond to inquiries, support mentoring and a range of diversity and inclusion related programs, events and initiatives.
15
Goldman Sachs - Technical Analyst Jun 2000 – Jul 2002 New York, NY • Assisted local and outsourced DBAs and network administrators with administration tasks in Sybase and
Oracle including coding scripts for database dumps and copies to replication servers, troubleshot UDB routines for copies from DB2, databases, completed procedures for weekly backups also resolved DNS, NFS, NIS, NIS+ and remote login issues
• Part of a distributed production support team that resolved network and database issues for critical processes that ran after market closure – participated in activities to restore production run capabilities affected by 9/11
• Produced daily reports that tracked incidents (technical and non-technical) that affected processes; served as liaison between business units and technical teams (DBAs, system administrators, etc.)
Morgan Stanley - Business Analyst/Programmer Jun 1998 - May 2000 New York, NY
• Served as project lead for Morgan Stanley’s allocation systems and assisted general ledger team with code changes to programs and procedures for Y2K adjustments and system analysis activities (integrated and decommissioned systems)
• Coded, modified and maintained programs written in Natural/Adabas; also wrote Korn shell scripts • Coordinated Y2K analysis, tool utilization and testing efforts with other development teams, outsourced
programmers and users, installed Unix server hardware and applications software (Solaris 2.5.1/2.6/2.7 – SPARC 10,20 – Ultra 30, 60)
Smith Barney - Programmer Jan 1997 – May 1998 New York, NY
• Selected to participate in a special training opportunity where MBAs were introduced to a technical “boot-camp” and received training in COBOL, DB2, Sybase, SQL and CICS ---- goal of the program was to produce technical program managers to support Y2K technical efforts
• Coded, modified and maintained programs written in COBOL II/DB2 that supported a financial product that allowed customers to trade a range of financial products for a fixed yearly price. Coded and testedY2K adjustments to existing programs and procedures
Bad Boy Entertainment – Consultant Part-Time Jan 1997 – Apr 1997 New York, NY
• Designed, developed and implemented Filemaker Pro database to organize correspondence received from fans of the music label and to catalog data for media outlets to streamline delivery of press releases
• Assisted in coordination of fundraising/promotional events for the music label
Peace Corps - Public Affairs Specialist Jan 1994 – Dec 1996 Washington, DC
• Wrote and edited news releases, feature articles, press materials that promoted Peace Corps programs and objectives
• Established and maintained effective relationships with print and broadcast media that resulted in several media opportunities for Peace Corps including a segment on the Oprah Winfrey Show and articles placed in U.S. News & World Report, The Washington Post, Black Enterprise and Mother Jones
• Served as lead media specialist for minority media outlets, also highlighted efforts of minority Peace Corps Volunteers
16
• Wrote SQL queries against Peace Corps databases to accurately report statistics about Peace Corps Volunteers (including number of Volunteers and countries served, states and colleges/universities that produced the Volunteers and programs Volunteers support)
Key Skills: Oral and written communications, project management, copy and editorial writing, diversity strategy Network: TCP/IP, NFS, DNS, NIS, NIS+, familiar with a broad range of network security tools used in both public and private sector environments Operating Systems: Solaris 2.5.1/2.6/2.7 Database: PL/SQL, Oracle, Sybase, DB2 Programming Languages: COBOL II, Natural/Adabas, some VBScript & bash Web: HTML, CSS, Javascript Security Certifications: Certified Information Systems Security Professional (CISSP), ISC(2) certified exam supervisor, CNSS 4011, 4013, 4015, IAM, IEM, Solaris 2.7 Certified Systems Administrator Diversity Certifications: Cornell University Certification in Diversity Management Applications: SPSS
Awards:
2004-2017: Numerous awards and recognition received for outstanding performance 2011: Nominated Intelligence Community Equal Employment Opportunity and Diversity Employee of the Year 2005: Outstanding Service Award Received from the Information Assurance Directorate at the National Security Agency 2002: National Science Foundation Computer Security Scholarship via Carnegie Mellon University – Received full scholarship and stipend to complete studies in information assurance
Education:
Carnegie Mellon University, Master of Science in Information Technology 2003 Concentration: Information Assurance George Washington University, Master in Business Administration 1996 Marist College, Bachelor of Science in Business 1994
17
JAMES ANDERSON [email protected]
Cyberwarfare Operator Reservist and veteran of active duty with a Top Secret Security Clearance (TS/SCI) and 6+ years of proven, security-based experience in the United States Air Force. Managed 900 user accounts and 400 workstations, as a Cyber Security Liaison, to comply with strict DoD Information Assurance regulations. Supervised 19 security posts with 34 personnel to protect Presidential restricted assets valued at $3.9B. Possess a comprehensive background in leadership, risk management, and threat identification and mitigation derived from both domestic and international experience. Recipient of multiple awards for outstanding performance and professionalism. Career supported by specialized military training and certifications through multiple industry organizations. Looking to bring skill set and experience to exciting opportunity in the intelligence industry or a penetration testing boutique.
• Risk Management •Team Leadership •Problem Solving • Policy Implementation •Records Management
• Training and Development •Emergency Response
• Physical Security • Customer Service
PROFESSIONAL EXPERIENCE United States Air Force Cyber Warfare Operator Apprentice (Joint Base Langley-Eustis, VA) Aug 2016 - Present A critical skills position with the responsibilities of conducting the United States cyber warfare mission.
• Train to detect and defend DoD network during cyber contingencies Cyber Security Liaison (Joint Base Andrews, MD) Nov 2015 - Aug 2016 A special duty position, covering a wide range of duties including managing projects, representing unit for NCR cyber security meetings, and reviewing/editing regulations.
• Ensured all members and workstations in group of 1000 people complied with DoD IA regulations
• Wrote memorandums for COMSEC/EMSEC implementations on new projects • Researched, organized, implemented and deployed IT projects to the vision of senior leaders
Client Systems Technician (Joint Base Andrews, MD) Sept 2014 - Nov 2015 Sole technician for unit of 1,000+ people, responsible for asset management, maintenance and update management.
• Configured and managed 900+ user accounts for computer access, e-mail and permissions • Managed and improved upon accountability process for $600k+ of IT equipment • Helpdesk technician for entire unit, troubleshot 400+ SIPR and NIPR workstations
Protection Level 1 Response Force Leader (Joint Base Andrews, MD) Feb 2011 - Sep 2014 Directly Responsible for the security and safety of White House and United States of America Presidential property valued at $3.9 billion dollars.
18
• Supervised the 19 highest level security posts within the Air Force-1 complex • Provide command and control response for POTUS restricted area
EDUCATION B.S. Computer Science University of Maryland University College Spring 2018 CERTIFICATIONS (denotes in-progress) SELECT AWARDS
(Offensive Security Certified Professional) Air Force Achievement Medal
(GIAC Web Application Penetration Tester) Airman of the Year
(GIAC Certified Windows Security Administrator) Sharp Troop Award
(GIAC Certified Incident Handler) Air Force Good Conduct Medal
GIAC Security Essentials Certification Top 3 Organization’s Airman of the Quarter
Linux Professional Institute LPIC-1 Top Dog Award
CompTIA Linux+ RAF Lakenheath Airman of the Quarter
EC-Council Certified Ethical Hacker / CNDA Volunteer of the Quarter
CompTIA Security+ ce
CompTIA Network+ ce
CompTIA A+ 901, 902 ce
TECHNICAL SKILLS Operating Systems Microsoft Windows *unix MacOS
Base Software VMware Cloud Storage
Languages Bash Python C
Defensive Abilities Packet Analysis Vuln. Assessment System Hardening
Offensive Abilities Web App Fuzzing Network Exploitation Basic Reverse Engineering
OTHER COMPETENCIES / EXPERIENCE
19
• Comfortable in command line • Understanding of NIST Cybersecurity Framework • Youth Mentorship • Foreign Language Acquisition (ILR Levels)
o Spanish (5) o French (2) o Russian (1) o Portuguese (1)
20
James Dasinger [email protected]
Linux Administrator experienced with modern Devops practices. Extensive experience administering Amazon Web Services environments.
PROFESSIONAL
EXPERIENCE Operative Jan 2017 – Mar 2017 Hackeducate Seven-week full-time Cybersecurity training focusing on offensive security
• Proficiency with common security tools such as Nmap, Wireshark, Metasploit Framework and Burp Suite
• Intro to OWASP Top 10 exploitation Systems Administrator Jun 2013 – Jan 2017 The Slate Group Infrastructure engineer and systems admin for slate.com supporting 150+ servers and a small team of application and web developers
• Extensive Amazon AWS administration via GUI and Command Line Interface • Infrastructure automation with AWS Cloudformation and Ansible • Web and app server admin in Apache, Nginx. CDN admin with Akamai and Fastly(VCL) • Launching and troubleshooting Docker containers. Container hosting with Docker Cloud • Monitoring with Nagios and NewRelic, including custom plugin creation • Administration of utility servers such as Jenkins CI server, Jira issue tracker, self-hosted • Splunk, and Graphite-Grafana metrics server • Bash and Python scripting • Familiar with DevOps/Agile principles. Experience working in a Scrum shop
Junior Systems Administrator Feb 2009 – June 2013 SalsaLabs Junior Systems Administrator supporting physical and virtual infrastructure in a Redhat environment
• General maintenance and support for Salsa, a Java-based web application on an Apache Tomcat/MySQL/RHEL stack
• MySQL administration including querying and updates, setting up new client databases, building and enabling slaves, and restoring databases from backups using Xtrabackup • User administration and support using OpenLDAP, Zimbra Email server, Google apps for
business, and Apple Remote Desktop
21
• Data center operations including racking and cabling servers and bootstrapping RHEL hosts
Intake Specialist Nov 2008 – Feb 2009 National Veteran's Legal Services Program Administrative services assisting Veterans with disability claims
• Interviewed injured veterans to determine appropriate services • Compiled dossiers on each client for screening lawyers • Managed client database including custom reports • Subject matter expert on DOD Disability Evaluation System2
Research Associate Jan 2008 – May 2008 Advocacy Project with Dale Farm Housing Association
• Conducted eviction impact survey at Dale Farm, UK for High Court case • Acted as liaison between the Irish Traveller/Gypsy community and Advocacy Project
offices, local NGOs and media. Produced reports and press releases. Research Associate May 2007 – Jan 2008 Infinite Computer Group
• Researched Government contract opportunities • Coordinated action on RFP’s, bidding opportunities, and capabilities briefings
U.S. Air Force April 1998 – April 2004 Cryptologic Linguist (Chinese)
• Translated military intelligence from Chinese and produced reports • Operated UNIX-based mission guidance workstation for live U2 and Predator missions • Acted as primary trainer and supervisor for groups of 5 to 10 junior analysts • Specific course training in Leadership and Management, Managerial Communications, and
Total Quality Management
EDUCATION -- CLEARANCE M.A. Political Science, California State University, Northridge B.A. International Relations (Cum Laude), University of South Alabama Top Secret / Sensitive Compartmented Information (TS/SCI) Counter Intelligence Polygraph (98-04)
TRAINING
22
Training and Certifications • Redhat Certified Systems Administrator (RHCSA #111-169-264) Dec 2011 – Dec 2014 • AWS 101 Course • Qualys Web Application Scanning Course • Whitehat Academy Workshops (http://whitehat.academy/): Web App Security, Offensive
Python,CTFs#1and#2
23
Jason Reyes Dedicated and motivated Network Engineer with a passion for network security looking to leverage and apply existing experience to a career in penetration testing.
PROFILE Built a lab environment and gained experience identifying and manually exploiting common Software and Web Application vulnerabilities Leveraged the use of commercial and open source tools such as Metasploit, Nmap, Kali Linux, OpenVas, tcpdump/wireshark, etc.
Practiced reverse-engineering techniques and the creation of custom shellcode and fuzzing/buffer overflow scripts.
Advanced knowledge of networking fundamentals (TCP/IP, network layers, Ethernet, ARP, etc)
PROFESSIONAL EXPERIENCE
Pacific Gas and Electric, San Ramon, CA — Network Specialist, Senior MAY 2015 - JANUARY 2017
Enforced Compliance with NERC/CIP v5 Cyber Security Controls
Advanced event analysis leveraging SIEM tools (Qradar)
Installed and configured a wide range of Cisco routers and switches (2900, 3900, ASR10xx | 2960, Catalyst 4500, 6500, Nexus 5k, 2k).
Migrated 100+ existing remote sites to (internal) MPLS Core.
Provided recommendations to projects regarding infrastructure design, buildout, and deployments.
Performed deep packet analysis using Wireshark
Tier 3 Troubleshooting/support on network related issues
Procured network documentation using Visio as well as technical documentation.
Worked with Security team to migrate from Cisco ASA to Palo Alto FWs
Created a document that became the basis for an enterprise-wide change management policy
Tower Electric Motor Company, Fremont CA— Data Entry FEBRUARY 2011 - NOVEMBER 2011
Listed product entries on E-commerce website.
Developed an application to greatly reduce time spent on listing products.
Developed an application to automatically list products on company’s Ebay Seller page
EDUCATION ComputerScienceChabotCollege,HaywardCAGraduate2018
CERTIFICATIONS
CCNAGIACGISFCompTIASecurity+OSCP(inprogress)
SKILLS/TECHNOLOGIES
Layer7:HTTP,RDP,DHCP,FTP,DNS,RADIUS,TACACS+,Telnet/SSHLayer3:EIGRP,BGP,MPLS,
Layer2:HSRP,Inter-VLANrouting,STPLayer1:T1,SMF/MMF
Other:CiscoIOS,NX-OS,Tools:(Kali)Linux,Bash,Nmap,OpenVAS,
Metasploit,curl,netcat,Hydra,BurpSuite,Wireshark/tcpdump,etc.
ProgrammingLanguages:Python,C,AHK,Bash
LANGUAGES
English
Tagalog
24
Jhanina Santiago [email protected]
Objective
Drivenprofessionalwith4yearsofcommunicationsexperiencecurrentlyenrolledinanimmersive,7-week,hands-on-keyboardcybersecuritytrainingseekingaPenetrationTesterorCybersecurityAnalystrolewheretheunderstandingoftheinformationsecuritylandscapecanbeapplied.Education
HackEd - 7 Week Cyber Security Training Program – Currently enrolled CompTiaSecurity+Certification–InProgress
Certificate of Graduate Studies in Cybersecurity and Intelligence, Salve Regina University, Newport, RI, 2016 (GPA: 3.850)
HRDesignation,ProfessionalinHumanResource(PHR),2008BachelorofScience,ComputerStudies-MinorinArt,UniversityofMarylandUniversityCollege,Adelphi,MD2002(GPA:3.9)TechnicalProficienciesLanguages:C,C++,HTML,CSSPlatforms:Windows,MacOS,Unix,Linux(Ubuntu,Kali),iOSTools:Maltego,Adobe(Photoshop,Illustrator,InDesignandDreamweaver),MicrosoftOfficeSuite,SalesforceHackEdTraining(Introto):nmap,Netcat,MassScan,Sparta,Metasploit,MSFVenom,Bash,Python,PHP,SQL,PowerShellEmpireSummaryofSkillsTechnicalSkills:• Planned,designed,analyzed,testedandimplementedasysteminPowerBuilder.• DebuggedprogramswrittenwithJCL,SAS,andCOBOLduringtheY2Kperiod.• DevelopedinHTML,CSSandJavaScriptintheDreamWeaverenvironment.• MaintainedandmanagedcontentfortheNavyEnvironmentalLeadershipProgramwebsite.ResearchSkills:• InvestigatedVIPsviaopensourcesearchtocomposeathreatanalysis.• Collectedandextracteddatafromnumerousresources,includingpublicintelligencereports,tocomposea
CyberThreatIntelligenceBrief.• Identifiedvariouslevelsofvulnerabilitiesinacompanythroughopensourcesearchofemployees,partnersand
mappingofcyberinfrastructureviaMaltego.CommunicationSkills:• Presentedapplicationbetaversionstomanagementandgeneratedreports.• Led new employee orientation. • Cited for excellence in building relationships with Managers and C-Level Executives.
25
• Developed a marketing strategy for the Navy Environmental Leadership Program (NELP) located at the Mayport, FL Naval Base.
WorkExperienceVarious Companies, Recruiting Consultant (DC, Tysons, VA) 2012 CNA Analysis and Solutions (formally Center for Naval Analysis), Employment Specialist (Alexandria, VA) 2006-2007 Spectrum Careers, Senior Recruiter (McLean, VA) 2004-2006 Preferred Temporary Services (PTS), Sales Manager/Recruiter (Washington, DC) 2004-2004 Tetra Tech NUS, Inc., Graphic Designer/Marketing Specialist (Jacksonville, FL) 2003-2003 ConservationInternational,WebDevelopmentAnalystIntern(Washington,D.C.) 2001-2002PotomacElectricPowerCompany(PEPCO),AssociateProgrammerAnalyst(Washington,D.C)1998-1999
26
Nicole Cooper [email protected]
Successful Information Technology leader with 15+ years of experience with emerging technologies and the federal government. Technology field experience with several multi-million dollar federal programs ranges from: aviation design, robotics, large software development efforts, IT hardware research and accreditation processes, software integration, analysis, evaluation, and federal government policy development. Strong experience with program evaluation and development for metrics of success for software development (social media, geo-spatial, data visualization, and others applications), COTS and GOTS integration, and enterprise architecture activities with several federal government agencies. EDUCATION – SKILLS – AWARDS
Tennessee State University, BS-Mechanical Engineering, Spring 2002 Certification: Scaled Agile Framework (SAFe) Agilist Microsoft Applications (Word, Excel, PowerPoint, Visio, Project, Publisher, Access, Sharepoint) Other Programs (Adobe Acrobat, Photoshop, Illustrator, Macromedia Dreamweaver, Lotus Notes, Lotus Notes Databases, Domino, SameTime, Stellent, Various Web Based media players, Castanet, Wiki programs, Blog programs, Intelink tools, xLink, Traction, ArcGIS) CAD Programs (AutoCAD, SolidWorks, Unigraphix), Xacta, Continuum HW Equipment (Servers—Linux, Servers-Windows, Backup and Storage Equipment, Virtual System (vmWare VSphere, vMotion), Cisco Routers, ASA Switches) Cyber Penetration Testing Tools Tenable Nessus, Tenable Security Center, WebInspect, AppDetective, KaliLinux, Accunetix, Burp, Nmap, SQLMap Policies: NIST(800-37, 800-53, 800-115, 800-137), ICD (501, 502, 503, 500-27, 704, 900), FedRAMP, FISMA, E.O. 12333, HSPD, FIPS Awards: ISG Kudos and Accomplishments (2013), EASD Appreciation Luncheon Recognition (2013), ANSER Spot Award, CACI Spot Award (2007 (2), 2008 (3)), Iran Mission Manager Award 08, NG Fusion Outstanding Contractor Award, CACI Achievement Award (2007 (3), 2008 (3)), DNI CIO Awards (07, 08, 09, 10), Recognition by North Korea Mission Manager, Official Recognition Memo from Director of National Counter-proliferation Center (NCPC)- 2010, CIA Apps Capabilities Showcase Team (IC3E)-2010, ISG Kudos Award (2013(2), 2014 (1), ManTech Recognition Bonus (2014), Vencore Hot Shot Award (2015 (2)), Vencore Team Recognition Award (2015)
PROFESSIONAL EXPERIENCE
27
Information Assurance/Security Engineer Principal Technical Specialist, Vencore, Arlington, VA 6/15 – 10/2016. Resource Center Support-Laurel Resource Center, 5/2016 – 10/2016 Serve as key personnel with supporting company proposal efforts and internal process organization. Work with a team of individuals to help develop and implement: cybersecurity certification training opportunities, hands-on cybersecurity skill development, new employee on-boarding activities, research for different technical expertise, developing internal processes and procedure for company activities. Additional provide commercial research, documentation review and editing, partnerships, and proposal support for new business opportunities for the company with different government customers.
Deputy, Security Engineering Support Team- NSD SE&I Program, 6/2015-4/2016 Served as key personnel as the deputy of the Security Engineering Support Team on the contract. Additionally, served as site technical team lead for the security penetration test team for cyber COTS and GOTS systems for government customer. Responsible for the development and integration of commercial and government best practices for security testing procedures and assessments and implementation for ITIL standards for the IT enterprise. Team was responsible for using a variety of security assessment tools to determine security vulnerabilities and risks with hardware, software, and network configurations with new products and/or projects. Managed and evaluated technical strategies, tools, and techniques to improve accuracy and precision for security situational awareness and security assessment testing strategy. Reviewed and evaluated different cyber security test tools for effectiveness with different IT system components. Tools used include: WebInspect, AppDetective, Nessus, Burp, Kali Linux, Accunetix, Fortify, Nmap, SQLmap, various IDEs, and others. Ensured that procedures for assessing the quality and accuracy of different commercial security tools followed best practices and met customer’s expectations. Provided analysis in formal reports delivered to the customer’s clients. Provided oversight of the Information System Security Officers to ensure that the customer is adhering to the Risk Management Framework for Authorization and Accreditation (A&A) processes. Senior Cybersecurity Subject Matter Expert (SME), ManTech MCIS, Herndon, VA 4/14 – 4/15. Technical Team Lead-CAD, IronGate Program, 4/14-3/2015
Served as the site technical lead for continuous monitoring analysis and analytic techniques for government customer. Responsible for the development of the technical strategy and direction for all analytic activities inclusive of: integration of technical tools for continuous monitoring analysis, integration of different analytic techniques, integration of federal and agency policy and practices, and development and production of reports. Participated in the development of configuration management and other ITIL related processes for the customer. Evaluated vulnerability IT tools (Security Center and Nessus, AppDetective, WebInspect, and MVM) for security control compliance, asset management, and performance management as it pertains to operational systems for the customer. Analysis team is responsible for integration and reporting of all security IT engineering activities for the continuous monitoring utilizing the Risk Management Framework as identified in NIST and other federal documentation. Reviewed systems scans and developed procedures to accurately
28
define and develop process for security monitoring for virtual systems. Provided analysis and review of FISMA and FISCAM systems to provide input to customer’s reporting procedures. Also, included research of incident response activities and reports to help improve overall cyber strategy for security. Senior Systems Engineer, L-3 Stratis, Reston, VA, 2/13-4/14 Senior Systems Engineer, Tetra Program, 2/13 – 4/14 Responsible for engineering internal quality control review of internal and external engineering development projects. Internal quality control duties to include: strong emphasis on reviewing project and technical concept documentation for accuracy, testing baseline procedures in customer lab, providing input to aligning of internal business procedures to ensure that customer can deliver engineering projects on schedule. Also, worked with various contractors and government personnel on analysis and evaluation of procedures to determine process improvement and coordination between different organization branches. Worked with Virtual Engineers to improve accuracy and testing of all customized processes for using VM technology. Coordination included addressing all aspects of the technical/engineering support to include tier1, tier 2, and tier 3 support, configuration management, ITIL procedure development, project managers, system integrators, and government branch chiefs. Senior Systems Engineer, SRI International, Arlington, VA, 10/11-2/13 Senior Systems Engineer, SCD-Railhead Team, 10/11 – 2/13 On-site contract technical team member and lead for Technical Insertion group, focused on engineering research internal and external to the federal government for solving analysis and integration issues for mission activities. Served as lead contractor for managing customer’s strategic advisory board for mission needs within the IT management office for the customer. Additional duties include: help coordinate customer’s involvement with IC-wide projects providing technical reviews, technical assessments, briefings, and vendor reviews to the customer for meeting organization’s strategic goals. Senior Systems Engineer, CACI Inc-National Solutions Group, Fairfax VA, 5/06- 9/11 Senior Systems Engineer, Fusion Team, 10/06 – 9/11 Secure Information Sharing Division, Fusion Contractor Lead, 2/10 – 9/11
On-site contract technical lead (only sub-contractor in branch as a division lead) for the DNI’s Office of the Chief Information Officer, in the IC Information Assurance’s Secure Information Sharing Division. Provide oversight, direction for overall contract deliverables and capabilities to a mixed company team and serve as liaison to government leadership. Perform as the contract technical lead for a secure information sharing project to include the following responsibilities: mission and customer outreach, business procedures, technical integration, agile development with executive agent, and overall project strategic management. Led efforts to review and develop design implementation strategy for software applications (social media, data entity resolution, geo-spatial, and other commonly used collaborative software) within the secure information sharing environment enclave.
29
Contract Team Lead-Mission Manager Branch (DNI IC CIO-Information Sharing and Mission Requirements) 6/09-2/10
Developed integration plans for on-going CIO business and technical transformation programs and executing DNI Mission Managers’ needs. Developed IC CIO mission manager portfolio and integration processes for more effective and efficient management of IC wide information to assist senior leadership in making timely decisions for policy makers. Led requirements analysis and collection efforts to ensure the IC CIO directorates could effectively coordinate actions to complete DNI mission manager assigned tasks. Collaborated with other contractors to develop process to update and integrate common mission collaboration software applications into enterprise architecture designs.
Mission Manager Liaison (DNI IC CIO-Enterprise Architecture Division), 2/07 – 6/09
Develop processes, procedures and techniques to develop efficient information sharing across IC for DNI Mission Managers to provide enterprise IC-wide sharing capabilities. The responsibilities included: Meeting participation with DNI Mission Managers regarding information sharing related issues, assisted with executing assigned actions for Mission Managers, developed requirements for DNI CIO Transformation programs. Collaborated with mission managers on inclusion of social media tools (wiki, blogs, chat, and collaborative spaces) into overall collaborative and knowledge managements strategies across the IC. Participated in IC-wide enterprise architecture environments to ensure the commonly used mission software applications requirements can be integrated into service oriented architectures (SOA) and IT processes.
Assist with the development of requirements for the Foreign Intelligence Relationship Enterprise System by coordinating and reviewing existing processes for sharing information for over 6 different federal agencies. Reported and updated senior-level decision making group on project status. Branch liaison for office bi-monthly vendor review meetings on new potential technology solutions for enterprise IT development.
NSG Opportunity Office Action Officer, 5/06 – 10/06
Developed business process and strategies for improving contract wins and more efficient processes for creating quality and competitive proposal packages with limited staff for IDIQ contracts in the National Solutions Group Opportunity Office. • Assisted staffing specialist and managers with searching and identifying quality external
and internal candidates for technical related positions • Developed a streamlined process for communication with partners and sub-contractors • Researched software solutions store relevant information for contracts, candidates, and
other pertinent information for different IDIQ vehicles. Served as subject matter expert for determining “best athlete” candidates
• Lead and participated in proposal efforts that resulted in an additional $10 million of new business wins for the business group
Scientist/Engineer, Analytical Services Inc. (ANSER), (Arlington, VA), 3/04 – 5/06
30
Developed Homeland Security policy and technical integration strategies for multi-million dollar federal departments and agencies focusing on the Intelligence Community (IC). Provided support for internal and external government agencies to utilize each agency’s capabilities to support the Department of Homeland Security’s mission.
• Drafted reports on multiple wireless interoperability issues that were provided to the customers
• Researched and developed support and integration plans for customer involvement with Homeland Security Information Network (HSIN)
• Researched and provided customer with reports for understanding Homeland Security networking and enterprise architecture issues
• Designed and maintained customer website • Authored Standard Operational Procedures Manual for customer operations
focusing on the Homeland Security Operations Center (HSOC) • Provided policy and operational analysis of new agency security plans including:
Interagency Security Plans (ISP), National Response Plan (NRP), Joint Field Office (JFO) Standard Operating Procedures (SOP), National Incident Management System (NIMS) and Special Event Integrated Federal Support Plans
• Developed “Lessons Learned” documents for federal response to Hurricane Katrina which was integrated into the final White House report
Cost Analyst, Wyle Laboratories, (Chantilly, VA and Ft. Meade, MD), 11/02 – 3/04
Developed life cycle cost estimates in support of the National Security Agency (NSA) for multi-million dollar projects.
• Developed documentation aimed to improve the data collection methods for identifying, utilizing, and transforming legacy systems
• Led and participated in different cost research efforts to improve cost estimating methods.
• Automated input and calculation processes for cost models • Participated in Vendor Reviews of COTS equipment for network projects
Omer Sheikh - 8131 Evening Star Dr. Apt. 463 Pasadena, Md. 21122 - 443.324.2521 (M) - [email protected]
Platforms: Windows 7/8/8.1/10, Windows Server 2003/2008/2012 R2, Linux (Red Hat, Ubuntu), Mac OS, Android, iOS, Apache, IIS, Weblogic
Networking: LAN / WAN Administration, VPN, TCP/IP, SMS/SQL, 100BaseT Ethernet, Cisco Routers & Switches, HP Managed Switches, Sonicwall Firewalls, VoIP, AuthAnvil Single Sign On & 2 Factor Authentication
Languages: C#, C, C++, HTML/HTML 5, Java, JavaScript, ASP.NET, Coldfusion, PHP, CSS, AJAX, JQuery, SQL, Bash, Python
Tools Metasploit Appscan Snort Nessus sTrace SQLMap Nmap GDB SQL Profiler Burpsuite Volatility RapidFire BeEF SecureOnion OpenVAS
IT Director / Security Consultant, OmegaCOR Technologies 4/1/15 – Present. x Responsible and accountable for the coordinated management of multiple related initiatives directed toward strategic
business and other organizational objectives. x Build credibility, establish rapport, and maintain communication with stakeholders at multiple levels, including those
external to our client’s organization. x Perform thorough network and web application security assessments using both automated and manual techniques
(Burpsuite, Sql injection, XSS, XSRF, Session Hijacking, insecure session handling, application logic flaws, business logic flaws, privilege escalation etc.)
Omer Sheikh Pen Tester / Information Security Engineer
A talented and ambitious cybersecurity professional with more than 15+ years of experience in information technology across a wide range of industries including healthcare, financial services, biotechnology, education and government.
(443)324-2521 [email protected] https://www.linkedin.com/in/omer-sheikh-979b6b7
Pasadena, MD
EDUCATION
Master of Science Management Information System
University of Maryland Baltimore County (UMBC)
HackEd Cohort 2017 Graduate
CERTIFICATION
Security +
CompTIA Healthcare IT
PMP
ITIL
CSSA – Firewall
CSSA – RSA
AREA OF EXPERTISE
Network & App Security
Research and Development
Regulatory Compliance
Cost Benefits Analysis
Policy Development
Virtualization & Cloud
Business Continuity
Technical Documentation
IT Automation
Team and Project Leadership
TECHNICAL PROFICIENCIES
CAREER HISTORY
Omer Sheikh - 8131 Evening Star Dr. Apt. 463 Pasadena, Md. 21122 - 443.324.2521 (M) - [email protected]
x Perform quarterly security and technology briefing with our ‘managed security’ clients. x Coach, mentor and lead personnel within a technical team environment. x Developed KPI dashboard and periodically reported on the current initiatives, future opportunities and client issues.
Project Manager / Sr. Consultant, OmegaCOR Technologies 1/1/10 – 3/31/15. x Defined and initiated projects, and assign Project Managers to manage cost, schedule, and performance of component
projects, while working to ensure the ultimate success and acceptance of the program. x Managed client engagement services and solution implementations x Provided business consulting, knowledge expertise in strategic performance management methodologies, process
assessment work, and the application of technologies to business. Attend monthly CIO meeting with clients. x Directed the coordination of all implementation tasks involving third party vendors as well as provide consultation to
clients on system implementation. x Managed transition of client from Solutions Implementation to Client Support. Managed the development and
maintenance of project implementations. Lead Network Engineer, OmegaCOR Technologies – IT Division 3/1/05 – 12/31/10. x Designed and deployed AuthAnvil two-factor authentication, single sign-on and password manager solution with multi-
tenant capabilities. x Designed and deployed various firewall solutions, such as Cisco ASA, SonicWALL NSA and Watchguard and High
Availability. Installed and configured Cisco and SonicWALL based VPN solution with end-point security for remote users.
x Installed and Configured various windows server and virtualization environments such as Windows 2003/2008/2012, Microsoft’s Hyper-V and VMWare solutions, Microsoft Exchange 2003/2007/2010 clusters and SQL 2005/2008/2012/2014 Servers with fail-over clusters.
x Designed and deployed business continuity solution using Datto and Symantec’s Backup Exec and Kaseya/Acronis. x Produced coherent technical proposals, standard operating procedures, product offerings and blog articles.
Sr. Software Developer, OmegaCOR Technologies – IT Division 9/20/01 – 2/28/05. x Architected and Developed an Enterprise Resource Planning (ERP) solution for a manufacturing company. x Developed Employee Portal with Task Management, Online Billing, Automated Invoicing, Reporting Module, Group
Calendar and Management interface for Medical Transcription Company. x Developed web-based freight distribution system with content management, POD tracking, storage module, payroll and
reporting module. Implemented mobile devices with GeoTack (Geo Tacking and Mapping). Consultant II, Aestix – A Booz Allen and Hamilton, Mclean VA. 1/1/01-9/10/01. x Developed Enterprise Workspace with Opportunity, Project and Document management system. The technologies that
were used include JSP, Java, JavaBeans, EJBs, XML, XSL and Livelink. x Conducted interviews with stake-holders, gathered requirements, modeled business processes and developed Intranet
Employee portal with full role based administrative and customizable functionality. x In charge of the integration and synchronization between Livelink and iPlanets LDAP server. x Configured and maintained BEA’s Weblogic Server and Opentext Livelink server on a UNIX and NT environment.
Consultant I, Booz Allen and Hamilton, Mclean, VA. 2/28/00-1/1/01. x Designed and developed an Intranet Employee portal with strict security and administrative functionality using
Coldfusion, JavaScript, HTML and Oracle database. x Developed an automated conference room scheduler for a corporation using Coldfusion, HTML, JavaScript and
Microsoft SQL Database.
33
OZODA USMANOVA
[email protected] OBJECTIVE A+ certified multilingual professional with nine years of international legal experience transitioning to IT field. EDUCATION & CERTIFICATIONS ASM EDUCATIONAL CENTER | Security+, CISSP Training 2016 PER SCHOLAS NCR | A+ Certification 2016 BYTE BACK ACADEMY | Microsoft Technology Associate (MTA), Advanced Excel Training 2016 TASHKENT STATE INSTITUTE OF LAW : Bachelors of Law, 3.89 GPA 2007 PROFESSIONAL EXPERIENCE Office of the Attorney General for the District of Columbia, Washington, DC February 2017 - Present Information Technology Intern
• Remove files containing confidential information from servers • Assist users with creating user accounts and managing passwords using Microsoft Azure Active Directory • Facilitate transition from ProLaw legal management software to Abacus Law software Paradyme Management, Greenbelt, MD January 2017 - Present Information Assurance and Cybersecurity Analyst Intern • Research and detect organization’s vulnerabilities • Assist the design of security breach prevention plan and draft compliance documents Leanmobileapps.com, Washington, DC 2016 - 2017 User Experience Analyst • Give presentations to employees and potential customers explaining how Hexsee app works • Test app and provide feedback to developers in order to improve customer experience
Legal Contract Assignments 2007 - 2013 Legal Department at Yahoo! Inc. via Nelson Legal, Nelson & Associates, Sunnyvale, CA Equal Employment Opportunity Commission San Francisco, CA Tashkent International Embassy School, Tashkent, Uzbekistan
• Produced responses to subpoenas and search warrants in compliance with law enforcement requests to assist in the investigation of internet child exploitation and immigration fraud cases • Performed legal research on key issues relating to the viability of claims in a complex construction matter
Universal Protection Services San Francisco, CA 2011 - 2012 Field Training Manager
• Conducted specific site-related training for security officers at their assigned job location to cover all facets of the officer's’ duties and responsibilities
34
• Ensured security officer compliance with all policies and procedures directed by the client and the company
Gulyamov and Partners LLP, Tashkent, Uzbekistan 2007 - 2009 Attorney at Law • Identified, summarized, and made recommendations on legal issues critical to case strategy • Advocated on behalf of clients in all stages of the litigation process
SKILLS • Troubleshooting PCs and mobile devices; MAC OS, Lexis Nexis, Westlaw, Relativity, Microsoft Office Suite • Fluent: Russian, Uzbek, and English; Proficient: Turkish
35
SrinathNandula [email protected] Cybersecurity professional passionate about information security, programming, networking & operating systems. Highly familiar with wide range of information security tools and concepts. Possess a bachelor’s degree in engineering and master’s degree in information systems security. EDUCATION – PROFESSIONAL EXPERTISE Education: University of Houston Dec 2016 Masters, Information Systems Security Jawaharlal Nehru Technological University June 2012 B.Tech. Electronics and communication Engineering Skills & Certifications: Certifications: CEH Technical Skills: Linux administration, Penetration Testing (both web and thick client), Remote Desktop Services, Web / Database Platforms (Apache, MS-SQL, MySQL), Vulnerability scanners (OpenVAS &Nessus), IDS/IPS (Snort, Suricata), Scripting (Python, PHP, PowerShell and shell/bash), Open Systems Interconnection (OSI) model and TCP/IP protocol architecture. Policies: Familiar with ISO/IEC, COBIT & PCI-DSS security frameworks.
PROFESSIONAL EXPERIENCE Teaching Assistant May 2015 – Jan 2017 University of Houston
• Teaching assistant to High Performance Computing Specialist • Assist, coordinate and monitor students during hands-on sessions in training classes such as
Linux, Python, C, Matlab, R, FORTRAN & Cluster computing • Help administer / maintain High Performance Computing clusters and supervise user accounts. • Developed and help administer / maintain an online interactive web education platform to host
courses conducted at the department. Software Quality Assurance June 2014 – Dec 2014 Electronic Arts, INDIA
• Worked on Multiple applications in wide range of Platforms (Android, Windows, iOS). • Performed black-box and ad-hoc testing in order to find crashes, de-syncsand other high severity
issues within the application code. • Developed and implemented multiple test cases and test suites using EA's test case management
systems for multiple applications. • Coordinated with domain experts (development and production teams) and provide constructive
feedback to address challenges that come up during the project. • Gained extensive hands-on experience with test and defect management tools (e.g. DevTest,
JIRA, BugZilla). Analyst-Content Engineering Jan 2013 - Nov 2013 GlobalLogic, INDIA
• Completed multiple projects onsite for Google,Hyderabad. • Primary focus was tomanage, update and authenticate the content on agoogleapplication using
backend tools and to have an accurate data on front end. • Worked on projects related to Google Maps.
36
Sudhakar Kumar [email protected]
SUMMARY • Specializations: Tools, Automation, Security, Web/Cloud, Linux • 4.5+ years of professional experience, 1+ years of startup/independent experience • 1+ years of experience working in Scrum, Partial Remote and Technical Leadership • 8 public projects shipped (2 enterprise, 6 games), 7 major internal tools shipped • B.Sc. in Game and Simulation Programming • Currently working towards M.Sc. Computer Science at Georgia Tech, Expected Graduation 2019 • Currently working towards LFCS (Linux Foundation Certified SysAdmin) • OSCP (Offensive Security Certified Professional), achieved June 14th 2016
SKILLS
• Languages: C#, F#, JavaScript, Python, Elixir (Erlang/BEAM), C, R, Shell Scripting (Bash, Batch) • Tools: Visual Studio, VS Code, VSTS/VSO, Git, GCC • Frameworks: .NET 4.6, .NET Core, Selenium/WebDriver, ASP.NET • Platforms: Linux (Ubuntu, Kali), Windows, Windows Azure, Embedded (Arduino, Raspberry Pi) • Methodologies: Functional Programing, Penetration Testing, Data Science, Scrum/Agile • Automation: Selenium/WebDriver, Azure Batch, Docker, Ansible • Blue Team: Security Onion, pfSense, Wireshark • Red Team: Kali, Metasploit, nmap, Wireshark, ExploitDB, OWASP Testing, edb/Ollydb
PROFESSIONAL EXPERIENCE Software Engineer II — Tools, Automation, Security Apr 2015 – Jan 2017 Bluetooth SIG
• Created and maintained 5+ ongoing automation projects using C#, .NET and Selenium • Developed and maintained tools using C#, F#, JavaScript, Python, .NET Core and Azure • Performed data analysis and generated reports using Python, R, Google Analytics and raw data • Onboarded the SIG with virtualized Linux and Docker based software development • Contributed to an experimental Bluetooth Gateway project, wrote whitepaper on device virtualization • Mentored and trainined junior programmers, defined coding style guides and technology stacks • Lead application Security effort at Bluetooth, defined security test plans and onboarded test teams • Performed Security testing for multiple projects, filed and verified Security related bugs
Cloud Network Engineer — SDE/SDET Hybrid Dec 2013 – Jan 2017 Cat Daddy Games / 2K Games / Take Two Interactive
• Created load testing suite to perform client emulation load testing for three titles • Created and maintained Azure logging and health testing tools for all Cat Daddy titles • Created and maintained browser based CRM tools for the Cat Daddy support team • Maintained and added functionality and gameplay features to Azure based game servers • Performed data analysis on various sources, including test results and customer data using R
Test Associate II — SDE/SDET Hybrid Apr 2012 – Apr 2013 Microsoft via Volt
• Developed test automation and testing tools using C#, WPF, and the XDK • Designed and implemented UI, data transfer services, reporting tools and unit tests • Performed multiplayer tests on Halo 4, Forza Horizon and Gears Judgment
37
Victoria A Croffie [email protected]
To obtain a Cybersecurity position in Forensics or Penetration Testing
~ EDUCATION ~ CERTIFICATIONS ~ SKILLS Old Dominion University Bachelors of Arts in Journalism with a Japanese Studies Minor (Graduated 2010) Northern Virginia Community College Associates of Applied Science in Cybersecurity (Graduated 2010) Certifications Security+ CE License Number #B2QL7NLGNK1Q2MF4 Operating Systems Linux (Debian, Ubuntu, CentOs), Windows (Windows XP, Windows Vista, Windows 7, 8, 8.1, 10) Applications/Tools Kali Linux, Open/Libre Office, VirtualBox, VMWare (Workstation Pro, Player), Open Source Information Tools(The Harvester, Discover, Recon-ng, Google Hacking Database, Bing Hack, Shodan, Maltego) EnCase, ThreatConnect, DHS's Automated Indicator Sharing Platform, Social Engineering Toolkit, Metasploit, Nexspose, Nessus, Open-Vas, Sparta, Masscan, Dirbuster, John the Ripper, Burp Suite, Wireshark, Snort, Nmap, Putty, Mimikatz
PROFESSIONAL EXPERIENCE Special Assistant for the Internet of Things Cybersecurity Nov 2015 - Present AllCyber Responsible for the coordination and management of club activities focused on CTF competitions, all IoT activities, and local meetups in the DMV chapter
• Train newcomers on offensive and defensive cybersecurity tools and participate in red team and blue team challenges within the group
o Kali Linux o National Cyber League (NCL) o Cyber Collegiate Cyber Defense Competition (CCDC)
• Provide lectures on a variety of topics incybersecurity for DMV area regular meetings • Perform server maintenance and serve as internal SME for helping club members with
configuration and installation of items for participation in club lab activities • Collaborate in teams via regional and statewide Capture The Flag CTF competitions
Recruiter Consultant Dec 2016 – Jan 2017 Cyber Defense Solutions Provided support to the recruitment team for the technical review and vetting of applications for cybersecurity positions
38
• Provided technical expertise to recruiters on using search databases and techniques for identifying qualified candidates for open positions
• Provided new methods for vetting the technical expertise of potential candidates Certified Pharmacy Technician Jul 2014 - Present CVS Fill and supply medicine to patients and oversee the billing of medications
• State certified as a pharmacy technician in the Virginia area • Adept in the dealing of claims and insurances regarding prescriptions • Skilled in multitasking in a fast paced environment to provide prompt and professional
service to customers DHS/NPPD/CS&C/NCCIC/TSS Jul 2016 – Nov 2016 Student Volunteer Initiative Intern Supported the Assessment and Authorization (RMF) of DHS and helped with the upkeep of vulnerabilities that are addressed to DHS
• Worked with the control implementations and collaborated with Northrop Grumman contractors to ensure NIST guidelines were followed. Improved the language in DHS’s controls with new language to to ensure each control is properly addressed
• Helped give companies access to DHS’s Automated Indicator Sharing/Trusted Automated Exchange Indicator.
• Communicated with private and public companies to troubleshoot issues and vulnerabilities
• Streamlined the existing SharePoint website portal and collaborated with two of DHS’s SOPs
• Provided a government lead weekly analytics from NCCIC’s AIS software • Participated in a contingency planning test and helped write a follow-up report
concerning it to help improve the process of the ISA governance Startup Apprentice Cohort May 2013 – Jun 2013 A100 Independent Software Collaborated within groups designing a website with front-end and back-end website functionality
• Worked with HTML/CSS to produce a job portal website within a group • Created a group charter for a group of five people and brainstormed to envision a wire-
frame mock-up for an updated look of an existing website Graduate Assistantship Sep 2012 – Jul 2013 University of New Haven
• Teaching assistant and tutor for undergraduate computer science students • Supported teachers in their computer science undergraduate level classes • Helped with basic tutoring for undergraduate computer science students • Supervised computer classes on the weekends and assisted students when needed
