Aaron E. Brown

Senior Network Security Engineer

1715 Ascot Way Unit E, Reston VA 20190

rnbrown343@gmail.com

843.277.4939

 

 

Objective: To further my goals of improving information security, cross-platform technology processes and enriching team environments

 

Degree/College/Year Graduated:  BA/Marshall University/1999

Other Education & Training:  Juniper SRX Bootcamp 2013/Juniper JNCIS-                                          ENT Bootcamp 2014/CCNA Academy 2000/

Certifications:  SSCP, JNCIS-SEC, CCNA-SEC, Security +, CCNA, CCDA, JNCIA, Network +, A+

 

Security Clearance:         Secret-current/TS investigation underway

 

Summary of Qualifications:   Computer Networking, Network Security,

Information Assurance.

 

Work Experience:

 

05/2015-Present-INOVA Healthcare

Senior Cybersecurity Engineer/Analyst

 

·  Assist Healthcare organization with risk management, vulnerability scanning,  and threat analysis.   Work with Sourcefire IDS, HP Arcsight SIEM, Splunk, Nessus, and Qualys security tools.  Assist with implementation of Rapid7 scanning tool.  Assist with the rollout of Splunk Enterprise security.  Utilize all tools to analyze, detect and mitigate threats and present posture to management.  Evaluate risk in third party connection proposals and present findings to management.

 

04/2015-03-2016- Defense Technical Information Center (Contract)

      Senior Network Security Engineer/Analyst

 

·  Utilize, tune and optimize Palo Alto Firewall, Juniper SIEM,  Cisco ASA, Cisco IronPort, Sourcefire IDS, Splunk, BigIP F5 network devices to detect, research and mitigate threats. 

·  Assess Federal and DOD information technology operations to identify risk in existing environment.  Align operations with NIST RMF framework and close organization’s security gaps.

·  Update system security plan to reflect current operations and align business operations with RMF goals.   Scan for and direct groups to apply and remediate STIG and IAVA findings

·  Employ multiple vulnerability scanning tools and techniques to penetration test and harden  Windows, Linux and Unix workstations and webservers against vulnerabilities.

·  Respond to and resolve local and upper level DOD directed cyber security incident investigation requests.  Follow and implement Taskord’s direction from Cybercomm

·  Engineer and combine ACAS vulnerability management and ticketing system solution to transition from VMS and enable groups to better identify and remediate IAVAs. Utilize various scanning tools within Kali Linux to test and ensure environment is secure.

 

 

 

11/2013-03/2015         Arbor Networks

     Network Security Engineer

·  Assisted in the rollout of Arbor Cloud security operations center.  Aided in the creation of processes and documentation to facilitate daily operations. 

·  Researched optimum solutions for daily function and outfitted SOC telecommunication needs.

·  Performed DDOS mitigation and customer provisioning.  Interfaced with clients and account team for onboarding, orientation, and testing.  Utilized Arcsight SIEM, TCPdump, Juniper MX routers, Arbor Peakflow TMS, Snort, Citrix Netscaler and Linux pcap servers to monitor and perform DDOS mitigations.  

 

01/2013-07/2013   College of Charleston (Contract)

     Network Security Engineer

·  Collaborated with others to manage network security for College departments.  Complete day to day Juniper SRX 5800 firewall port requests. 

·  Setup and managed site to site VPNs

·  Utilized security and network management tools such as Juniper Storm SIEM, Juniper Space, Splunk, Firemon to monitor and maintain network security. 

·   Troubleshot issues with Intrusion Prevention Systems, Firewalls, VPNs and PKI. 

 

 

09/2010-11/2012    SPAWAR Systems Center Atlantic (Contract)                                              Security Engineer

·  Handled calls for Navy Medicine pertaining to the NPLS security suite managed at multiple sites around the world. 

·  Troubleshot web proxy, firewall, router, and switch problems with Cisco, Foundry and Juniper equipment.  

·  Answered trouble tickets with Remedy ticketing system and reported problems in a timely manner. 

·  Applied patches, IOS image and firmware updates to  Cisco 4800/7200 series routers ,3000 series switches,  6500 series firewalls and Ironport Web proxy devices, Palo Alto and Mcafee Nitro SIEM. 

·  Restricted and permitted access to websites, applications, and files per site request adhering to Navy Information Assurance rules and guidance.  

·  Applied DOD and Information Assurance mandated security blocks and access control lists to routers and firewalls.   Worked on multiple projects to better categorize network data and increase efficiency of daily tasks. 

·   Monitored network equipment and overall bandwidth at all sites for any impending hardware failures and took preventative action. 

 

 

12-2003-09-2010        U.S.  ARMY, Fort Bragg (Contract)

            Network and Security Engineer

 

·  Assisted with network core upgrade project.  Took network from 1-10gb utilizing Foundry Bigiron layer 3 switches and OSPF.   Physical install to all IDF/MDF locations and network testing.

·  Configured and deployed IPsec VPN’s utilizing Cisco 2600 Routers and HP switch devices to connect remote DOD school traffic through Bragg backbone.  

·  Setup rogue access point detection software system utilizing Linux.

·  Helped setup and deploy Airdefense wireless intrusion detection system, Symantec network instrusion detection system, and Cisco network access control appliances. 

·  Configured and deployed General Dynamics TACLANE hardware encryption devices to secure areas around installation.

·  Administered Cisco then Blueridge Networks remote access VPN.                       

 

 

 

1999-2003 INDEPENDENT CONTRACTS

   Server Tech/Network Tech

Infranet Technologies Group

 

·  Set up network servers, routers, switches and IP Telephony equipment.

·   Helped with and oversaw deployment of workstations, network equipment and Cisco IP phones. 

·  Solved network problems of all kinds at the router, switch, server, IP Phone and desktop levels.  Setup and troubleshot server backups using Veritas Backup Exec. 

·  Setup and troubleshot problems with Windows 2000/2003 Server, Microsoft Exchange, Symantec Corporate Antivirus, Windows 98/2000/XP desktops and Redhat Linux 9 Desktops.

 

 

 

 

New Hanover Health Department

   

·               System Administration duties for Windows NT network and IBM AS-400.  

 

Computer Merchant

      

·               Performed Compaq Proliant Server upgrades for the US Department of  Agriculture at various sites around the state of West Virginia and Eastern North Carolina  Performed migration from Lotus

·               Notes Microsoft Outlook of US Senator Byrd and Rockefeller’s offices in West Virginia. 

 

Sapphire

·               Windows 2000 data migration.  Backed up data to network server.

·               Used Norton Ghost to image.  Set up client on Lotus Notes and Oracle internet

        application. 

 

Advanced Technical Solutions

 

·               Work done for computer networking firm.  Configured Cisco Routers and Switches. Set up small office networks. Installed and configured Windows 2000 Small Business Server domains, and set up network services. Troubleshot LAN/WAN connections at the desktop, server, router and firewall.

·               Performed network cabling and wireless implementations.

 

Brown Communications

·               Managed and supervised help desk support for small LAN.  Hardware/software configuration and implementation. 

·               User training on various software. Administrative and sales duties.  Designed and implemented LAN/WAN networking solution.