Jose Lopez

Sca Enterprise Senior @Defense Advanced Research Projects Agency Darpa

Arlington, VA, US

Advise the Information System Owner (ISO) concerning the impact levels for Confidentiality,Integrity, and Availability for the information on systems.• Ensure security assessments are completed for each IS.• Initiate a POA & M with identified weaknesses and suspense dates for each IS based on findings andrecommendations from the SAR.• Evaluate security assessment documentation and provide written recommendations for securityauthorization to the CISO and AO.• Assess proposed changes to Information Systems, their environment of operation, and missionneeds that could affect system authorization.• Serve as a cybersecurity technical advisor to the CISO and AO under their purview.• Be integral to the development of the monitoring strategy. The system-level continuous monitoringstrategy must conform to all applicable published DoD enterprise-level or DoD Component-levelcontinuous monitoring strategies.• Determine and document in the SAR a risk level for every noncompliant security control in thesystem baseline.• Determine and document in the SAR an aggregate level of risk to the system and identify the keydrivers for the assessment. The SCA\'s risk assessment considers threats, vulnerabilities, andpotential impacts as well as existing and planned risk mitigation.• Develop the continuous monitoring plan specific to the information system. Performed comprehensive vulnerability assessments, prioritizing critical vulnerabilities. Proactively identified and investigated suspicious activities using Trellix EDR, leading to the detection and containment of advanced malware attacks. Utilized ACAS to ensure compliance with relevant security standards and regulations (e.g, NIST, PCI DSS). Provided reports demonstrating adherence to compliance requirements for internal and external audits.

Morgan State University - Graves School of Business & Management

Bachelor of Science (B.S.), Business Administration and Management, General

University of Maryland Global Campus

Master of Business Administration - MBA, Business, Management, Marketing

University of Maryland Global Campus

Computer Networking Undergraduate Certificate, Computer networking