Vertex Pharmaceuticals

Cybersecurity Principal Engineer

Northrop Grumman

Principal Cyber Systems Engineer

US Navy

Provides expertise in cybersecurity, information technology, command and control, communications, networks and space systems through the planning, acquisition, operation, maintenance and security of systems.

Information Professional Officer

Responsible for establishing, monitoring, and maintaining radio frequency communication systems, as well as operating and maintaining global satellite telecommunications systems. Duties include transmitting, receiving, and storing all incoming and outgoing messages, managing and coordinating information systems security across platforms and fleets, and designing, installing, and operating wide-area networks, computer systems, and associated devices. Additional responsibilities include performing network system administration, maintenance, and training, managing network security, and installing applications while troubleshooting user issues. Tasked with providing training and assistance on computer hardware and software, writing programs to collect and distribute data, ensuring proper security and handling of communications materials and equipment, and performing diagnostics, data recovery operations, and maintaining logs.

Information System Technician

Responsible for installing, testing, troubleshooting, and repairing or replacing cryptologic networks, physical security systems, electronic equipment, antennas, personal computers, auxiliary devices, digital and optical interfaces, and data systems. Additional tasks include configuring, monitoring, and evaluating Information Operations (IO), Information Warfare (IW) systems, and Information Assurance (IA) operations. Expertise in performing hardware and software isolation and repairs for state-of-the-art electronics, computer and network equipment, and related systems using complex test and analysis equipment, diagnostic software, hand tools, and technical publications. Also tasked with maintaining fleet cryptologic permanent and carry-on direct support systems essential for special land, sea surface, and subsurface operations.

Cryptologic Technician (Maintenance)

Command Destroyer Squadron 21 (CDS 21)

Manages network and telecommunication activities to achieve global operations. Coordinates with global satellite, network and telecommunications service providers to obtain Internet Protocol services and to establish Service Levels of Agreement.

Information Technology Manager

Navy Information Operations Command Hawaii (NIOC HI)

Directed Computer Network Operations (CNO) teams in the planning and execution of Offensive Cyber Operations (OCO) supporting national objectives.

Cyber Warfare Officer

USS IWO JIMA (LHD-7)

Developed system Assessment and Authorization packages consisting of 50 systems under Risk Management Framework, implemented information assurance controls, documented risks and provided recommendations to leadership. Executed mitigation plan and developed Plan of Action and Milestones (POA&M).

Information Systems Director

Naval Network Warfare Command (NNWC)

Provided command and control decision-making support and shared situational awareness of four global enterprise networks.

Global Network Operations and Security Center Manager

Command Destroyer Squadron 50 (CDS 50)

Provided critical Command, Control, Communications, Computers and Intelligence (C4I) support to a staff of 40 overseas.

Navy Information Operations Command Georgia (NIOC GA)

Managed a 19-person, multi-service team responsible for the installation and maintenance of telecommunications and network infrastructure in support of 3,000 personnel.

Information Technology Division Supervisor

Naval Security Group Activity (NSGA) Groton and Pearl Harbor

Certified, installed and maintained communications and network equipment suites to include local/wide area networks installation, troubleshooting, operating system configurations (Linux, Unix and Windows) and associated network administration.

Fleet Electronic Support Maintenance and Installation Technician

M.S. Network Operations & Technology | Sec+, IAM I, IAT II | ITIL v3 | Navy IP Officer | Seeking Cyber, GRC and ISSM-related roles | Open to CO, CO Springs and remote roles | Active TS/SCI Clearance | Available 8/23

As a seasoned cybersecurity professional and career strategist, I bridge the gap between technical expertise and career development in the rapidly evolving security landscape. My journey spans multiple technologies, industries, and organizations, giving me unique insights into what drives success in cybersecurity roles.

Having successfully navigated my own transition from military service to civilian cybersecurity, I now dedicate myself to guiding others through their career journeys. I specialize in helping veterans leverage their military experience for cybersecurity roles, understanding that the path can seem overwhelming without proper guidance.

I take pride in demystifying cybersecurity careers through:
- Strategic career mapping and transition planning
- Certification and skill development guidance
- Resume optimization and interview preparation
- Professional networking strategies
- Personal brand development

When I'm not mentoring cybersecurity professionals, you'll find me on the golf course, pursuing fitness goals, or writing about industry trends. These diverse interests inform my holistic approach to career development – because success in cybersecurity requires both technical excellence and personal balance.

Connect with me to discuss:
- Military to civilian transition strategies
- Breaking into cybersecurity
- Career advancement in security roles
- Professional development planning
- Building resilient security teams

I regularly share insights, trends, and opportunities in cybersecurity. Let's connect and build a stronger security community together.

Josh Hicks

Digital Realty

-Assist in reviews and enhancement of security policies that aligns with global regulations and leading practices.
-Track enterprise compliance across multiple security frameworks including SOC 2, NIST and ISO and maintain up-to-date records of requirements and corresponding mitigating controls.
-Monitor third-party risk assessments and assist in performing internal risk assessments.
-Analyze management and technical controls to ensure that specific security and compliance requirements are met through the verification of documented processes, procedures, and standards in order to validate maintenance of secure configurations.
-Participates in cross organizational working groups representing cyber compliance initiatives.
-Assist in mapping Digital Realty requirements and regulatory requirements across the information security framework to identify overlapping requirements and compliance efficiencies.
-Assists in sharing key examination findings to help organizations limit security risks and comply with laws relating to securing customer financial and sensitive data.
-Assists in global cyber security audits, internal and external.
-Participate in the development of security and privacy awareness training in conjunction with other members of the Security Compliance group.
-Collaborate on critical IT projects to ensure that security policy/risk issues are addressed throughout the project life cycle.

GRC Analyst

-Assess, monitor, and mitigate potential risks posed by vendors throughout their lifecycle, from selection and onboarding to ongoing monitoring and termination. 
-Collaborate with cross-functional teams to develop and implement strategies that minimize vendor-related risks and maintain the organization's reputation and operational integrity.
-Analyze vendor contracts, service-level agreements, and other relevant documents to identify potential risks and ensure necessary safeguards are in place..
-Perform thorough due diligence on potential vendors to validate their capabilities, business practices, and adherence to industry standards.
-Collaborate with procurement and legal teams to ensure vendor contracts incorporate appropriate risk mitigation clauses and compliance requirements.
-Develop and implement risk mitigation strategies for high-risk vendors, including implementing controls, monitoring mechanisms, and contingency plans.
-Collaborate with internal stakeholders to ensure vendor risk mitigation efforts align with organizational risk appetite.
-Coordinate with vendors to address identified risks, security vulnerabilities, or compliance issues.
Escalate critical risks to senior management and work collaboratively to resolve issues and implement corrective actions.
-Communicate vendor risk findings, assessments, and mitigation plans to relevant stakeholders, including senior management, legal teams, and compliance officers.
-Prepare and present comprehensive reports on vendor risk management activities, highlighting key risks and mitigation progress.

Vendor Risk Analyst

Experience with Abnormal Cloud Email Security:
--Responsible for deploying and managing Abnormal cloud email security solution.
--Successfully blocked 99.9% of all malicious emails that were sent to the organization.
--Provided detailed reporting on all email activity, which was used to improve the organization's email security posture.
--Monitored and analyzed email traffic for suspicious activities and potential threats, proactively addressing security incidents.
--Assisted in the development of policies and procedures related to email security, ensuring adherence to industry standards.

Experience with Zscaler
-Implemented Zscaler's secure web gateway and secure cloud firewall to protect the company's network from internet-borne threats
-Configured Zscaler policies to enforce internet usage and access control for the organization
Monitored and troubleshooted Zscaler's security events and incidents to ensure the security of the network
-Worked closely with the IT team to ensure that Zscaler was integrated seamlessly with the organization's existing security infrastructure
-Regularly reviewed and updated Zscaler policies to ensure compliance with industry standards and best practices.

Experience with SentinelOne:
-Implemented SentinelOne's endpoint protection platform to secure the organization's endpoints against advanced threats
-Configured and customized SentinelOne policies to meet the organization's security needs
-Monitored and analyzed SentinelOne's security events and incidents to identify and respond to potential threats
-Collaborated with the IT team to integrate SentinelOne with the organization's existing security infrastructure
-Regularly updated and maintained the SentinelOne platform to ensure optimal performance and security
-Assisted in security incident response and investigations that involve SentinelOne

Cyber Security Analyst

Experience with Rapid7:
-Implemented Rapid7's security solutions such as Metasploit, Nexpose, and InsightIDR to enhance the organization's vulnerability management and incident detection capabilities.
-Configured and customized Rapid7 policies to meet the organization's security needs.
Monitored and analyzed Rapid7's security events and incidents to identify and respond to potential threats
-Collaborated with the IT team to integrate Rapid7 with the organization's existing security infrastructure
-Regularly updated and maintained the Rapid7 platform to ensure optimal performance and security
-Assisted in security incident response and investigations that involve Rapid7

Experience with Proofpoint:
--Implemented Proofpoint's email security solutions to protect the organization's email systems against advanced threats such as phishing, malware, and spam
-Configured and customized Proofpoint policies to meet the organization's security needs and comply with industry standards
-Monitored and analyzed Proofpoint's security events and incidents to identify and respond to potential threats
-Collaborated with the IT team to integrate Proofpoint with the organization's existing security infrastructure
-Regularly updated and maintained the Proofpoint platform to ensure optimal performance and security
-Assisted in security incident response and investigations that involve Proofpoint
-Worked with end-users to educate them on how to identify and report suspicious emails

Security Operations Center Analyst

Intellectual Point

Mentored 100+ veteran students weekly in finding meaningful employment, increasing job offer rates by 20%.
Managed the resumes of 1000+ veteran students in our Talent Management system, implementing new processes that improved efficiency by 15%.
Cultivated strategic partnerships with universities and staffing companies, facilitating seamless onboarding of students to our pathways and increasing collaborative opportunities by 25%.

Career Services Specialist

Responsible for working on assisting with automating and integrating the IT platforms, continuous integration of Monday platform, working with Dialpad systems for outbound and inbound
communication and outreach to Veterans, working on simple texting platform for SMS based communication, working on assisting veterans with job search and job placement, delivering workshops for interview prep and LinkedIn updates, outreach to various veterans and connecting them to recruiters to help assist them with their career journey in the IT/Cybersecurity industry.

IT Systems Analyst | Veterans Success Support

Smoothstack

Mission ready preparation includes 400+ supervised hours of cybersecurity training curated for
Smoothtack SOC/ NOC/ SRE analysts; taught by industry experts. Each analyst must complete an
additional 200+ hours of eyes-on-screen in our virtual security operations center (SOC); which shares
and receives information from partners/agencies for increased protection against threat actors.
Smoothstack cyber analysts work as individuals and within teams to identify and neutralize
incoming and future threats. Analyst must be approved through a rigorous evaluation process prior
to SOC access being granted.
Smoothstack cyber analysts work as individuals and within teams to identify and neutralize
incoming and future threats. Analyst must be approved through a rigorous evaluation process prior
to SOC access being granted.
Networking fundamentals
Cybersecurity fundamentals
Threat actors
Mitre framework
Intelligence report writing
NIST information sharing guidelines
Data Visualization (MQT)
Intelligence report production (MQT)
Mission planning (MQT)
Mission briefing/debriefing (MQT)
Ops floor standard operating procedures (MQT)
Firewall access to Flint Hall ELK (will expand with future clients)
Attend mission briefs
Accept package objectives
Threat research
Threat hunt
Write reports as appropriate
Facilitate mission brief and mission debrief

Directed military personnel in delivering information systems and information assurance training, support, and management to 11 subordinate divisions. Led team of 15 military personnel from 7 various divisions in providing cross-training and quality customer service to 2k users onshore and launches. Administered daily operations of network installations, configurations, and Active Directory (AD) services for assigned networks and domains. 
-	Increased mission readiness for organization through process improvements and new methods. 
-	Directed and supported Navy/Marine Corps Intranet (NMCI) Refresh & Replacement of 400 assets across the company and 11 divisions resulting in minimal personal data loss. 
-	Led and facilitated NMCI Windows 10 update to 300 assets across an organization and 11 divisions with minimal data issues.

Information Systems Security Manager

Headed Information Systems Division of 31 personnel while training diverse team of 31 employees in Iwo Jima’s ADP Division's daily operations facilitating 2,700 personnel during and laborious deployment. Improved work-center of 27 personnel in management and maintenance of 30+ networking and 900 computing systems facilitating 2k+. 
-	Contributed to 1st on-time completion of CANES system onboarding large-deck naval ships by managing $19M installations and upgrades of shipboard command and control systems and afloat networks during 11-month maintenance availability. 
- Supervised post-installation integration of $10M for program record system and software into Consolidated Afloat Network Enterprise Services (CANES).
-	Guided 31 employees through JTF-MATTHEW, basic and integrated phases of training, and TYCOM/INSURV Mid-Cycle inspection; guaranteed availability of all C2 systems and attained basic training phase score of 94% in network operations. 
-	Exalted by ISIC for leading communications support to Commander JTF-MATTHEW, embarked units, and non-government organizations delivering 601,000lbs of aid supporting Humanitarian Assistance Disaster Response to Republic of Haiti. 
-	Created and initiated comprehensive divisional training program to boost response times and resolutions of ADP trouble calls by 90% and cyber awareness and network security by 95%.

Information System Manager

•	Coordinated talents of 23 cyber technicians in Department of Defense (DoD) Information Networks globally. Organized efforts of sensor analysts, incident handlers, and vulnerability technicians. Delivered critical training and reach back support to 3 Distributed Defensive Cyber Operations (DDCO) sites ensuring tangible initiatives met operational specs for each DDCO and their respective area of responsibility. 
-	Supervised detection, prosecution, and mitigation of 717 network incidents and observed 179 strategic Navy network sensors. 
-	Protected 1,600 Navy divisions against determined adversaries by delivering rapid isolation and containment of DoD network. 
-	Engineered various standard operating procedures and optimized produces across Cyber Tack Unit while improving communication between NCDOC and support divisions.

Computer Network Defense Manager

Led 25+ military and civilian personnel within operations of Sensitive Compartmented Information (SCI) Network Operations Center. Governed safekeeping of 70-line items of cryptographic electronic keying material. 
-	Composed valuable standards for security and shielded 180+ communications security (COMSEC) line items daily. 
-	Steered 20+ SCI function shifts between global network operation centers preserving control with 0 network outages. 
-	Exercised leadership stature during $286k Sensitive Compartmented Technical Refresh, resulting in 95% system availability and reliability support to forces. 
-	Served as Electronic Key Management System (EKMS) Local Element and trained 20 military personnel to properly handle cryptographic material.

Network Operations Center Supervisor 

I'm a cybersecurity professional with over 20 years of IT experience, while in the Navy. I hold Sec+, CEH, and LSSYB certifications, and a Bachelor's degree in Information Technology Management. I am currently a Cyber Security Analyst at Digital Realty, where I deploy and manage cloud-based security solutions such as Abnormal, Zscaler, and Rapid7. 

I am also a Career Services Specialist at Intellectual Point, where I provide career guidance and support to veterans and IT professionals who are pursuing cybersecurity certifications and training. I leverage my strong background in IT, my passion for technology, and my experience in the military to help others achieve their career goals and transition into the cybersecurity field. I am driven by the mission of protecting organizations from cyber threats and empowering individuals to succeed in the digital era.

taplio

The Battle

Josh Hicks

Merle Rodriguez ⚓️

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?