Open to opportunities

John Cartwright

@johncartwright

Message

Cybersecurity professional specializing in threat intelligence, incident response, and vulnerability management.

United States

Message

What I'm looking for

I seek a hands-on cybersecurity role focused on threat detection, incident response, and vulnerability reduction within mission-driven teams that value processes, continuous improvement, and measurable risk reduction.

I am a cybersecurity professional with experience across federal and defense environments, focused on threat intelligence, incident response, and vulnerability management. I have implemented SIEM monitoring, Nessus scanning, and patching programs that significantly reduced organizational risk.

In operational roles I created SOPs and processes that improved security posture—authoring incident response plans, managing on-site Nessus and RHEL solutions, and developing CTI procedures that identified and removed high-threat vulnerabilities across hundreds of hosts.

My background includes supporting large enterprise SOC operations, producing hundreds of actionable reports, and maintaining forensic capabilities. I hold industry certifications and am completing an M.S. in Computer Science, seeking to apply analytical and technical skills to strengthen organizational defenses.

Experience

Work history, roles, and key accomplishments

Current

Information System Security Officer

Current

FGS LLC

Aug 2024 - Present (1 year 5 months)

Owned security posture, compliance, and risk management for 12 on-site and cloud systems; implemented weekly Tanium patching that reduced vulnerabilities by 90% and established CTI SOPs removing high-threat vulnerabilities on 300+ hosts.

Nessus Tanium Vulnerability Management Incident Response SOP Development

Mid-Level Cyber Analyst

Leidos

Sep 2022 - Aug 2024 (1 year 11 months)

Authored SOPs and incident response plans to support NIST compliance, implemented and maintained an on-site RHEL-based Nessus solution, and conducted security audits and STIG compliance assessments.

Nessus Red Hat Enterprise Linux Incident Response NIST Security Auditing Policy Development Collaboration

Intelligence Specialist

United States Navy

Jan 2019 - Sep 2022 (3 years 8 months)

Supported SOC as a Cyber Threat Intelligence Analyst for a 15,000+ person enterprise, authored 200+ actionable cyber incident reports, and managed $1.2M in digital forensics equipment while using ATT&CK and Cyber Kill Chain frameworks.