Open to opportunities

Karla Resureccion

@karlaresureccion

Message

Senior cybersecurity specialist driving cloud security, compliance, and risk reduction with DoD clearance.

United States

Message

What I'm looking for

I seek senior roles focused on cloud security, compliance, and risk management where I can lead FedRAMP/RMF efforts, integrate DevSecOps controls, and mentor teams.

I am a Senior Cybersecurity Specialist with over a decade of experience delivering enterprise-level security, compliance, and risk management across government and commercial environments. I hold an active Department of Defense Top Secret clearance (SCI) and am CISM certified.

My work focuses on cloud and on-premises security, integrating DevSecOps controls, vulnerability management, and IAM to strengthen security posture and reduce high-risk findings. I have led FedRAMP and RMF ATO efforts and produced SARs, POA&Ms, and other essential RMF artifacts.

I have implemented automated security testing in AWS, Azure, and GCP pipelines, driven reductions in critical vulnerabilities, and improved detection and response using Splunk, CrowdStrike, Tenable, and Prisma Cloud. I combine technical depth with Agile/SCRUM project management to deliver measurable security outcomes.

I am a pragmatic consultant and team collaborator who advises engineering and leadership on hardening, cloud configuration, and compliance readiness, ensuring systems meet NIST 800-53, CMMC, SOC 2, ISO 27001, and privacy requirements such as GDPR and CCPA.

Experience

Work history, roles, and key accomplishments

Current

Senior Cloud ISSO

Current

ALTA IT Services

Jan 2021 - Present (5 years 5 months)

Integrated automated security testing and control gates into AWS, Azure, and GCP pipelines, reducing high-risk findings by over 30% and advancing FedRAMP/NIST 800-53A compliance readiness for cloud systems.

Cloud Security FedRAMP AWS Azure GCP)Tenable Splunk IAM GCP

Lead Information System Security Officer

Booz Allen Hamilton

Jan 2018 - Jan 2021 (3 years)

Led RMF and FedRAMP ATO efforts for classified and commercial cloud services, produced SARs and POA&Ms, and improved cloud detection and response capabilities, reducing misconfigurations by 25%.

FedRAMP NIST 800 53 SAR POA&M Cloud Security Splunk Incident Response

Cyber Security Engineer

Government Contractor

Jan 2012 - Jan 2018 (6 years)

Directed RMF-based risk management for U.S. Air Force intelligence systems, coordinating ACAS/XACTA assessments and authoring technical documentation to support continuous monitoring and ATO decisions.

ACAS Risk Management Security Engineering Vulnerability Management

Information System Security Engineer

Prism

Jan 2011 - Jan 2016 (5 years)

Implemented security controls and conducted IT security control assessments to support ATO packages and ensure compliance with NIST, ISO, and FISMA frameworks across large-scale IT systems.

Security Control Assessment NIST ISO FISMA)Risk Management Security Architecture & Compliance FISMA