Looking for a job

Breon Smith

@breonsmith

Cybersecurity & Cloud Security Engineer at T6 HEALTH SYSTEMS who automated container vulnerability scanning and reporting.

United States

Message

At T6 HEALTH SYSTEMS, I lead cloud security work for a cloud-native healthcare platform, aligning AWS architectures with DoD security requirements. I integrated security controls into CI/CD pipelines and developed an automated container vulnerability management and reporting pipeline.

I also use Amazon Bedrock and Amazon SageMaker for AI and machine learning work, and integrated AWS Lambda, Amazon S3, and Amazon Textract in document-processing automation. I analyzed and categorized over 27,000 container vulnerability findings to support migration and remediation planning.

At CMS (CENTERS FOR MEDICARE & MEDICAID SERVICES), I supported RMF and FISMA compliance for REGTAP, secured AWS environments, and automated compliance reporting. I also used Splunk to investigate activity and system logs, and monitored AWS CloudWatch logs and alerts.

Across my cybersecurity and cloud roles, I’ve worked on vulnerability management, incident response, and security authorization under frameworks including NIST, HIPAA, HITRUST, and ISO 27001. My certifications include CompTIA Advanced Security Practitioner + CE (CASP) (Security X), CompTIA Security + CE, CompTIA Network + CE, and Certified Ethical Hacker (CEH).

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity & Cloud Security Engineer

Current

T6 Health Systems

Jan 2025 - Present (1 year 10 months)

Led end-to-end STIG compliance strategy for a cloud-native healthcare platform, aligning AWS ECS/Fargate, EC2, and RDS architectures with DoD security requirements. Integrated DevSecOps security controls into CI/CD pipelines using Jenkins, GitLab, and SonarQube, and leveraged Amazon Bedrock for generative AI solutions.

Cybersecurity Manager

CMS (Centers for Medicare & Medicaid Services)

Jan 2024 - Jan 2025 (1 year)

Ensured FISMA compliance by implementing RMF to identify, assess, and manage security risks across REGTAP. Updated security controls documentation in alignment with NIST 800 series guidelines and collaborated with engineering teams to ensure timely remediation.

FISMA RMF NIST 800 53 HIPAA HITRUST ISO 27001 SOC2 AWS IAM Security Groups RBAC MFA Cloudwatch CloudTrail GuardDuty Splunk Datadog New Relic Nessus Netsparker Tableau POA&M SIEM AI ML yum

Senior Cybersecurity Administrator & Cloud Engineer

Coperion

Dec 2021 - Jan 2024 (2 years 1 month)

Developed and implemented security and privacy policies aligned with NIST and ISO 27001, ensuring compliance with regulatory requirements. Conducted end-to-end vulnerability and risk assessments using Nessus, Tenable, and AI-assisted risk prioritization, remediating 99% of identified threats within priority windows.

Senior Information System Security Officer (ISSO)

The Select Group

Feb 2021 - Dec 2021 (10 months)

Updated and reviewed security documentation such as SOPs in accordance with NIST 800 series guidelines. Created and maintained Plans of Action and Milestones (POA&Ms) to document and track remediation of identified security vulnerabilities.

NIST 800 53 RMF E MASS SCAP Radix ACAS Nessus DISA STIGs STIG Viewer IAVA ATO DIACAP Vulnerability Management Patch Management Security Documentation

Cyber Incident Responder

United States Army

Aug 2018 - Jan 2021 (2 years 5 months)

Identified cyber vulnerabilities and compliance issues and made recommendations for network access based on the nature of the system. Reviewed ongoing vulnerabilities and mitigation statements to ensure valid steps are taken to lower or remove residual risk.

Incident Response IDS IPS EDR Packet Captures Log Analysis Malware Analysis Forensic Imaging Threat Hunting RMF PKI SIPRNet NIPR Processes Vulnerability Assessment

Information Systems Manager

United States Army

Jul 2017 - Aug 2018 (1 year 1 month)

Managed IT infrastructure, including servers, networks, and applications, ensuring 99.9% uptime and system reliability. Budgeted and allocated resources for IT projects, achieving a 15% cost savings while meeting project timelines.

IT Infrastructure Windows 10 Migration Active Directory Group Policy Linux Disaster Recovery Business Continuity Vulnerability Scanning Help Desk Management VPN Remote Desktop

Information Technology Specialist

United States Army

Dec 2013 - Jul 2017 (3 years 7 months)

Collaborated with a team of 15-20 specialists and administrators to support a depot of over 3000 customers on multiple projects. Monitored environment for abnormalities and submitted reports to senior admin for additional hardening and patching.