Looking for a job

Jean L'Hoste

@jeanlhoste

Message

I lead federal RMF assessments, vulnerability analysis, and authorization support across cloud and on-premises systems.

United States

Message

What I'm looking for

I'm looking to lead or support federal cybersecurity assessment, RMF, vulnerability-management, continuous-monitoring, and authorization work across on-premises and cloud environments.

I'm a cybersecurity professional with more than 20 years of IT and security experience supporting federal, DHS, and FedRAMP environments. At Leidos/Softek, I lead Security Assessment and Authorization activities for general support systems, applications, FedRAMP-authorized systems, and cloud service providers.

I assess security controls against NIST, DHS, DISA STIG, FedRAMP, and organizational requirements, using Nessus results and technical evidence to identify gaps, validate findings, and prioritize risk-based remediation. I develop SARs and RARs that document vulnerabilities, residual risk, and recommended actions for authorization and POA&M decisions.

Previously at GDIT, Perspecta/Peraton, Falconwood, and Professional Alternative/CSC, I supported FISMA compliance, continuous monitoring, ATO package development, SSPs, POA&Ms, ISSO responsibilities, and cloud-transition assessments. I've worked across Windows, Linux, ESXi, IBM Mainframe, IaaS, and Salesforce FedRAMP environments.

My earlier engineering and IT leadership work included building a classified multi-user standalone information system certified by the Defense Security Service, managing system security, and supporting network operations. I bring electrical engineering discipline alongside hands-on federal cybersecurity assessment and risk-management experience.

Experience

Work history, roles, and key accomplishments

Current

Senior Information Assurance Analyst

Current

Leidos / Softek

Jul 2022 - Present (4 years 2 months)

Senior Security Control Assessor leading Security Assessment and Authorization (A&A) tasks for various general support systems, major/minor applications, FedRAMP authorized, and Cloud Service Provider environments. Conducts security compliance and control assessments using NIST standards, DHS requirements, DISA STIGs, and FedRAMP requirements.

NIST DHS DISA STIGs FedRAMP Nessus Security Assessments Risk Management Framework (RMF)POA&M SARs RAR

Senior Information Security Analyst Advisor

GDIT

Nov 2021 - Jun 2022 (7 months)

Provided security expertise in FISMA, OMB, NIST and federal government requirements to support IT Security and Privacy compliance. Conducted regular assessments of site implementation of FISMA controls to support Continuous Monitoring.

FISMA NIST OMB Continuous Monitoring ATO POA&M SSP

Senior Security Control Assessor

Perspecta/Peraton

Jan 2021 - Oct 2021 (9 months)

Senior Security Control Assessor leading Security Assessment and Authorization (A&A) tasks and activities for various general support systems, major/minor applications, FedRAMP authorized, and Cloud Service Provider environments.

NIST DHS DISA STIGs FedRAMP Nessus Security Assessments RMF

Senior Cyber Security Analyst

Falconwood Inc.

Jan 2020 - Jan 2021 (1 year)

Information System Security Officer (ISSO) for legacy system transitioning to the Salesforce FedRAMP CSP environment. Analyzed scans to validate DISA STIG and SRG configuration requirements were met.

ISSO FedRAMP DISA STIGs SRG POA&M NIST 800 37 NIST SP 800 30 Agile

Security Control Assessor

Knight Point Systems / Perspecta

Dec 2016 - Dec 2019 (3 years)

Security Control Assessor leading Security Assessment and Authorization (A&A) tasks and activities for various general support systems, major/minor applications, FedRAMP authorized, and Cloud Service Provider environments.

NIST DHS DISA STIGs FedRAMP Nessus Security Assessments RMF

Senior Electrical & Instrumentation Engineer

Keystone Engineering

Nov 2014 - Feb 2016 (1 year 3 months)

Engineering and design of electrical, control, safety and instrumentation systems that meet or exceed the requirements of the National Electrical Code (NEC), American Petroleum Institute (API) and the National Fire Protection Association (NFPA). Generated and developed instrumentation and electrical installation drawing packages for medium and low voltage systems.

Electrical Engineering Instrumentation NEC APIs NFPA

Senior IT Security Specialist

Professional Alternative / CSC

Dec 2012 - Nov 2014 (1 year 11 months)

Information System Security Officer (ISSO) for multiple enterprise information systems and platforms – IaaS, Windows, Linux, ESXi and IBM Mainframe. Implemented and maintained security controls and procedures to ensure compliance with program requirements throughout the Risk Management Framework process.

ISSO RMF NIST DHS 4300A FISMA SDLC SSP POA&M BMC Remedy

Electrical & Instrumentation Engineer

Keystone Engineering

Jun 2011 - Dec 2012 (1 year 6 months)

Electrical Engineering Instrumentation NEC APIs NFPA

C&A Security Analyst

Apex Systems Inc / CSC

Jan 2011 - Jun 2011 (5 months)

Applied NIST Special Publications and Certification & Authorization (C&A) process methodology in completing SSPs and other C&A artifacts for DHS data center migration. Assisted in providing oversight and enforcement of security directives, orders, standards, plans and procedures at server sites.

NIST FISMA DHS 4300 C&A SSP

Network and Desktop Support Technician

1 Lake Properties

Aug 2010 - Jan 2011 (5 months)

Installed, configured and tested PC hardware, network routers, network cards, check scanners, modems, HP printers, Jet Direct print servers, Citrix ICA client software, and Windows 7 / XP Pro along with other company specific software. Assisted in network security configuration and auditing.

PC Hardware Networking Win7 Windows XP Citrix Network Security

Electrical Engineer / IT Manager

Dot 21 Real-Time Systems

May 1999 - May 2009 (10 years)

Built Multi-User Standalone Classified Information System that met all National Industrial Security Program Operating Manual (NISPOM) requirements and hardening guidelines; received certification and accreditation from the Defense Security Service (DSS). Information System Security Manager (ISSM) and managed security authorization schedules, performed risk management, and supported external and in