Erick Xir

About Erick Xir

Cyber Security Professional seeking career opportunities in the DMV area. United States Marine Corps Veteran with over 15 years of military service, leadership experience and DoD/IC compliance in the areas of crisis management, risk management framework, cyber security, cyber policy, network defense, logistics, and administration. A certified Security Professional fluent in both English and Spanish. Accomplished in developing effective processes and directing complex logistics functions that support a multibillion-dollar office. Excel at coordinating tasks of numerous internal divisions across the agency to ensure rapid, accurate delivery of deadlines and resources. Record of accomplishment identifying redundancies and maximizing resources to streamline operations. Proven ability to multi-task both independently and as part of a team to meet requirements and meet objectives. Direct experience with Cybersecurity Maturity Module Certification (CMMC), NIST standards, Risk Management Framework (RMF), Xacta, Nessus software, ACAS, Splunk, Threatfix, SharePoint, Confluence and JIRA. Over 8 years of experience in cyber security procedures, analytics and threat assessment.

Experience

1. Security Control Assessor (Sca)

   Securigence Llc

   Feb 2025 — Present · Arlington, VA, US

   Plan, coordinate, and execute independent security assessments on DoD and IC information systems-Review and validate Security Authorization Packages (SAPs) including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA & Ms), and risk acceptance documentation-Evaluate system compliance with RMF (Risk Management Framework) and report security control effectiveness-Provide recommendations on risk mitigation strategies and system authorization decisions (ATO, IATO, etc.)-Conduct on-site assessments, vulnerability scans, documentation reviews, and interviews to validate control implementations-Coordinate with Information System Owners (ISOs), Information System Security Officers (ISSOs), and Authorizing Officials (AOs) to support the full lifecycle of security assessments-Support the development and maintenance of policies, standards, and guidance consistent with cybersecurity best practices-Stay current on cybersecurity threats, assessment tools, and emerging standards-Evaluate the effectiveness and implementation of Continuous Monitoring Plans-Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries-Initiate a Plan of Action and Milestones (POA & M) with identified weaknesses for each-Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system.

Education

• The George Washington University

  Master's of Science In Professional Studies- MPS, Cyber Security Strategies & Information Management

  2017 — 2019

• Ashford University

  Bachelor's degree, Health & Wellness

  2015 — 2017