Open to opportunities

Alexander Newson

@alexandernewson

Message

Experienced information security professional specializing in RMF, SA&A, and security documentation.

United States

Message

What I'm looking for

I seek roles where I can lead RMF/SA&A efforts, produce clear security documentation, support cloud migrations, and work on compliance in collaborative, mission-driven teams.

I am an information assurance and information security professional with over eight years of hands-on experience implementing RMF, SA&A, and NIST-based compliance across federal and commercial environments.

I develop, maintain, and update critical security artifacts including SSPs, SARs, POA&Ms, BIAs, and COOP documentation, and I lead gap analyses and cloud migration assessments, notably for AWS.

My background includes technical writing, security assessments (Step 4 RMF), vulnerability scan interpretation, and administering security awareness/training platforms to ensure organizational compliance and readiness.

I am results-driven, comfortable working in Agile and project-based settings, and I consistently deliver clear documentation, process improvement recommendations, and actionable remediation tracking to support authorization to operate efforts.

Experience

Work history, roles, and key accomplishments

Current

Technical Writer

Current

VISPX

Jan 2024 - Present (2 years 2 months)

Authored white papers and SA&A documentation, organized project workstreams and instructed moderators, and produced POCs for external partners to support program delivery.

Technical Writing Project Management PoC Development Agile Documentation Management

Technical Writer

Agile (NERC)

Mar 2023 - Dec 2023 (9 months)

Administered Apptega, conducted NIST CSF and NIST 800-53 assessments, and developed policies and SOPs to address audit requirements and improve compliance posture.

Apptega NIST CSF NIST 800 53 Policy Development SOPs Security Assessments & Compliance

Technical Writer

Kforce

Jun 2022 - Jan 2023 (7 months)

Served as proxy writer and revised RMF policies, procedures, and technical playbooks for financial clients, managed documentation in Confluence, and presented supply-chain bridge documentation.

RMF Confluence Technical Writing Documentation Management Presentation Quality Assurance

Technical Writer

Impellam Group

Apr 2021 - Jun 2022 (1 year 2 months)

Created security control policies, managed infrastructure status documentation, authored AWS migration onboarding materials, and performed cloud gap analyses for MAC transitions.

Policy Writing Cloud Migration AWS Onboarding RMF

Technical Writer

OST Inc.

Oct 2020 - Mar 2021 (5 months)

Developed and updated Business Impact Assessments, SOPs and ConOps for multiple systems, supported FISMA/NIST compliance efforts, and managed security awareness training artifacts.

Business Impact SOPs FISMA NIST)Security Awareness Configuration Management NIST

Technical Writer / ISSO

EXIM Bank

Sep 2019 - Oct 2020 (1 year 1 month)

Developed COOP documentation, managed SAT/iLMS administration, and created and tracked POA&Ms across 38 systems while leading COOP testing and after-action reporting.

ILM SSP Incident Response

Technical Writer

SABMD LLC

Sep 2018 - May 2019 (8 months)

Produced proposals and conducted cloud system assessments using FedRAMP/NIST, performed Step 4 RMF security assessments, and authored Security Assessment Plans and SARs.

FedRAMP NIST 800 53 Security Assessments SARs AWS Vulnerability Assessment

IT Security Analyst / Technical Writer

GEICO

Dec 2017 - Sep 2018 (9 months)

Reviewed Nessus, WebInspect and DBProtect scan results, executed security assessments under tight timelines, and produced supporting assessment documentation for varied systems.

Nessus DBProtect Security Assessments Vulnerability Management Technical Writing Reporting RMF

Information Security Specialist

State Farm

Jul 2016 - Dec 2017 (1 year 5 months)

Prepared audit walkthroughs, updated policies and SOPs, provided trend analysis and performance metric presentations to support security operations and audits.

SOPs Audit Support Trend Analysis Data Reporting Presentation FISMA

Information Security Specialist

AIL Insurance

Feb 2016 - Jun 2016 (4 months)

Planned and implemented security measures, led artifact interviews for system documentation, and updated FISMA authorization packages to support compliance.

FISMA Artifact Collection Interview Authorization Documentation & Compliance

Information Security Specialist

Shared Systems Solutions

Mar 2015 - Jan 2016 (10 months)

Conducted recurring vulnerability assessments, collected artifacts for assessors, and performed POC interviews and data retrieval to support security reviews.

Vulnerability Assessment Artifact Collection Interview Nessus Assessments Reporting

Information Security Specialist

Washington Tavern

Aug 2013 - Mar 2015 (1 year 7 months)

Performed vulnerability scanning with Nessus, authored emergency planning documents, and acted as liaison between assessment teams and system POCs to update security policies.

Nessus Policy Writing Documentation NIST)NIST

Helpdesk / Junior InfoSec Analyst

Student Nitty Gritty

May 2011 - Jun 2013 (2 years 1 month)

Provided desktop and network support, installed and configured printers, and investigated root causes to deliver solutions and workarounds for technical issues.

Troubleshooting Desktop Support Root Cause Analysis Networking Customer Support