Open to opportunities

Isreal Ntungfor

@isrealntungfor

Message

Experienced Cyber Security Professional with over eight years in IT.

United States

Message

What I'm looking for

I am looking for a role that challenges my skills in cyber security and offers opportunities for professional growth and collaboration.

I am a dedicated Cyber Security Professional with over eight years of experience in Information Security and Information Technology. My expertise lies in supporting Information Systems Development Security Life Cycle (SDLC) and the NIST Risk Management Framework (RMF) process. I have successfully implemented and executed all six phases of the RMF, from Categorization through Continuous Monitoring, and have a proven track record in performing security control assessments following FISMA standards.

Throughout my career, I have developed and reviewed critical security documentation, including System Security Plans (SSP), Security Assessment Reports (SAR), and Contingency Plans (CP). My role as an Information Assurance Security Specialist at the Department of Homeland Security has allowed me to provide Assessment and Authorization (A&A) support for various systems, ensuring compliance and security across the board. I thrive on collaborating with stakeholders to tailor security controls and develop comprehensive security documentation that meets organizational needs.

Experience

Work history, roles, and key accomplishments

Current

Information Assurance Security Specialist /ISSO

Current

Peraton

Oct 2022 - Present (2 years 9 months)

Provided Assessment and Authorization (A&A) support for new and existing systems, ensuring compliance with continuous monitoring (CONMON) requirements. Developed and updated security documentation, including System Security Plans (SSP) and Contingency Plans (CP), to support DHS systems.

Assessment And Authorization (A&A)Contingency Plan Nessus Acunetix STIG Compliance

Security Compliance Analyst

Mathematica

Feb 2020 - Present (5 years 5 months)

Participated in all steps of the Security Assessment and Authorization process for FISMA systems. Developed key security documentation and artifacts, including SSP, SAP, SAR, RA, ISCP, and IRP, adhering to organizational templates. Managed and coordinated system security continuous monitoring activities, such as vulnerability scanning and audit log review.

FISMA Audit Logs

Security Control Assessor (SCA)

Xcelerate Solutions

Feb 2018 - Present (7 years 5 months)

Performed Security Control Assessments using NIST SP 800-53A to evaluate the adequacy of implemented security controls. Developed and updated security documentation, including Security Assessment Plan (SAP) and Security Control Test Plan, prior to assessment kickoff. Reviewed security artifacts and developed post-assessment documentation such as SSP, SAR, and POA&M.

Security Control Assessment

Education

Degrees, certifications, and relevant coursework

University of Maryland Global Campus (UMGC)

MSc. Cloud Computing Systems, Cloud Computing Systems

Currently pursuing a Master of Science degree in Cloud Computing Systems. This program focuses on advanced topics in cloud infrastructure, security, and deployment.