Veredus Work Values

Daily Duties at Veredus:

Managed and provided oversight for the certification, accreditation, and the risk management posture of systems located at the client environment. Managed the continuous monitoring program, which was comprised of identifying gaps, preparing a project plan with documented milestones, formulation of a team of vulnerability analysts, categorization and remediation of vulnerabilities, and lessons learned from the initial exercise. Managed a team of vulnerability analysts who performed the DIACAP 800.53 control set review to accredit new and reaccredit existing network infrastructure and applications, provided review of access requests to assigned systems. Also managedn the firewalls, scheduling maintenance, audit and compliance review of firewall rulesets. Managed the review of existing security architecture and recommendation of new/additional components to the existing security architecture to improve security posture of the network and defense-in-depth posture. Managed incident response as the team lead; documented the incident response procedure and executed as required. Implemented Netwitness for forensic analysis of incidents. Managed Identity Access Management, defining solution requirements and developing a solution architecture to solve business issues. Application prioritization, defining the various solution components, vendor analysis and proof-of-concepts. Also managed mobile device security; working in concert with Windows Administrators to develop group policy to appropriately address security concerns unique to mobile computing.

What they like about Veredus:

A hiring company that offers alternative approaches to pay, performance bonuses, and/or equity in the firm is very attractive to you. You're generally less interested in working for an organization offering only traditional, salary-based compensation, one with limited opportunity to acquire equity in the firm, or one that does not actively promote skill development. In addition, you are more likely to choose a company that offers a variety of internal career options, with defined career paths. You view the learning of new skills and development of your expertise as key to your career advancement. These aspects of an organization may become even more important to you as you progress in your field, and are especially critical if you change career or occupation.

Tags

information security, information assurance, information security lead, Firewalls, NIST 800-53, NIST 800-37, DIACAP, CISSP, vulnerability assessment, Advanced Persistent Threat detection, web analytics

Skills

Highly developed soft skills, Project Manager, Highly developed security related technical skills, Firewall administrator (Cisco), Secret Clearance (Active), CISSP , Adept with new technologies and keeping up with current threats, Stephen Covey Highly Effective People training, Dale Carnegie , Lean Six Sigma, PMP in process

These are some of the questions we asked our climbers about their experiences with Veredus: