Looking for a job

Kofoworola Olamide

@kofoworolaolamide

Security Control Assessor at Digital Global Connectors assessing security across NIH cloud services and documenting remediation gaps.

United States

Message

What I'm looking for

I’m seeking a role in the DMV, and I’m willing to work anywhere in the area. I bring experience in security control implementation and assessment, authorizations, and POA&M management.

At Digital Global Connectors, I assess security posture and controls, document remediation gaps in POA&Ms, and maintain a Customer Inheritability Matrix for STRIDES users and stakeholders.

Previously, I assessed security controls and coordinated vulnerability and penetration testing for federal clients at DMInc, Goldbelt Nighthawk, CACI, and Leidos. My work has included RMF and ATO documentation, security assessment reports, and control assessments using NIST guidance. I hold active CISM, CISA, CMMC Certified Professional, Security+, and PMP certifications, along with an active Secret clearance.

Experience

Work history, roles, and key accomplishments

Current

Information Assurance/Security Analyst

Current

Digital Global Connectors

Jan 2023 - Present (3 years 10 months)

Assessing overall security posture to evaluate the effectiveness of security controls and provide recommendations for improvements. Identifying security gaps for future remediation in accordance with the NIST Risk Management Framework (RMF), including documenting Plans of Actions and Milestones (POA&Ms).

NIST RMF POA&M Nessus Splunk Tenable.Sc SCAP Wireshark AWS Security Hub AWS GCP Azure GitHub Cloud Security Security Assessments Risk Management

Lead Security Control Assessor

DMInc

Apr 2020 - Dec 2022 (2 years 8 months)

Conducted interviews with key stakeholders to document that system protocols are in place and being followed as intended. Collected and reviewed artifacts supporting the proper implementation of controls, and assessed security controls using CSF, NIST 800-53A (Rev 4), and agency guidelines.

NIST SP 800 53A CSF Risk Assessment Security Assessment Reporting Penetration Testing Vulnerability Analysis RMF System Security Compliance Audits

Lead Security Control Assessor

Goldbelt Nighthawk

May 2019 - May 2020 (1 year)

Managed a team of 26 security assessors, providing mentorship and quality assurance for security assessments and risk analysis reports. Analyzed security configurations of Windows, Linux, cloud environments (AWS, Azure), and databases for compliance with CIS benchmarks.

Team Leadership Security Assessments Risk Analysis NIST SP 800 53 CIS Benchmarks Windows Linux AWS Azure RMF E MASS DISA STIGs

Information System Security Officer

CACI

Feb 2016 - May 2019 (3 years 3 months)

Performed ongoing RMF/A&A/ATO projects in support of client security systems using NIST SP 800-37 Rev 1 as a guide. Selected and implemented applicable security controls (technical, operational and management) using NIST SP 800-53 Rev 4 as a guide.

NIST 800 37 NIST SP 800 53 RMF ATO System Security POA&M FIPS 199 NIST SP 800 60 Vol 1 and 2 Rev 1 Continuous Monitoring Vulnerability Management

Security Control Assessor (SCA)

Leidos

Jan 2013 - Jan 2016 (3 years)

Performed security controls assessments using NIST SP 800-53A as a guide by means of assessment methods such as Interview, Examination and Testing. Developed and conducted ST&E (Security Test and Evaluation) and performed on-site security testing using vulnerability scanning tools such as Nessus.

NIST SP 800 53A Security Assessments ST&E Nessus Vulnerability Scanning Security Plan Development Security Assessment Reporting Risk Assessment