SecurityScorecard

DFIR and OSD Engagement Manager

Devo

Responsible for validating that all enclave information systems (IS) are functional in accordance
with security controls, policies, and procedures. Determine the enclaves’ long term information
Assurance (IA) systems needs and acquisition requirements to accomplish operational
objectives. Develops and implements information security standards and procedures in alignment
with certification, accreditation, policies, processes and frameworks.

Director, Security Assurance

ManTech

Senior Cyber Security Engineer

Software Engineering Services

● Conducts full-spectrum vulnerability assessments against specified US Air Force assets, participating in all aspects of customer engagements from requirements scoping to report delivery.

● Utilizes a combination of tools, primarily Nmap, Tenable Nessus/DISA Assured Compliance Assessment Solution (ACAS), Kali Linux, packet captures (TCPdump/Wireshark), Powershell, Windows Management Instrumentation (WMI), psexec, DISA SCAP Compliance Checker (SCC), STIG Viewer, and Bash,/Python scripts in order  to enumerate customer networks, illuminate risks, and demonstrate vulnerabilities to evaluated systems.

● Responsible for writing detailed reports of findings which include problem description, impact, and recommended fix action along with related NIST 800-53 and DoD 8500.2 controls.

CSSP Auditor/Vulnerability Assessor (Unix/Linux)

Salient CRGT

● Serves as the senior Cybersecurity contractor and is responsible for all Cybersecurity aspects of 24th Air Force cyber command and control mission systems; serves as liaison to external entities when coordination of cybersecurity efforts is needed.

● Reviews scheduled vulnerability scan results; schedules additional scans with external entities as needed; recommends and tracks vulnerability remediation efforts. 

● Checks assigned systems for compliance through Security Content Automation Protocol (SCAP) enabled tools and using manual checks where necessary.

● Responsible for maintaining all aspects of assigned systems’ Risk Management Framework compliance using DISA Enterprise Mission Assurance Support Service (eMASS) tool; uploads artifacts, updates documentation, and tracks programs of action and milestones (POA&M) as necessary.

● Documents processes and procedures and writes internal knowledge base articles as needed.

Senior Cybersecurity Analyst

Vista Defense Technologies, LLC

Serves as the project manager for the Defense Health Agency PKI Office Program Support contract, which serves as the primary focal point for PKI assessments, auditing, user and administrator training, engineering oversight, and personal health information breach response oversight. Duties include:

● Serves as primary organizational point of contact for client.
● Liaison between client and all organizational staff working on the project. 
● Ensures timely conveyance of all contractually required deliverables.
● Works with client and any other key stakeholders to obtain additional information needed to complete the project.
● Reports progress/status to client; coordinates scheduling with client.
● Ensures effective team performance. 
● Coordinates activities of all personnel engaged in project delivery. 
● Ensures that all team members understand the project objectives and their role in the project. 
● Obtains commitment from team members to complete their respective responsibilities.
● Coordinates and resolves issues should any arise for the project.
● Serves as final quality control check prior to any deliverables being turned over to the client.
Identifies, collects, analyzes, and reports all project-specific measures.

Project Manager and Lead PKI Engineer

Engility Corporation

● Conducts full-spectrum vulnerability assessments against specified US Air Force assets, participating in all aspects of customer engagements from requirements scoping to report delivery
● Utilizes a combination of tools, primarily Nmap, Tenable Nessus, Wireshark, Powershell, WMI, psexec, Bash, and Python scripts in order to enumerate customer networks, illuminate risks, and demonstrate vulnerabilities to specified equipment
● Responsible for writing detailed reports of findings which include problem description, impact, and suggested fix action along with related NIST 800-53 and DoD 8500.2 controls

Cyber Systems Security Assessor

US Army Cyber Protection Brigade

●	Provided technical oversight and advice to the team lead regarding all operations and training for a United States Army Cyber Protection Team assigned to protect US Army assets worldwide
●	Planned, provided expert oversight of, and evaluated the execution of team’s participation in a national-level cyber training exercise, which directly impacted the team’s ability to respond to incidents on Department of Defense IT infrastructure 
●	Contributed to two brigade-level planning teams, both of which resulted in much-needed standardized documentation and training for all teams
●	Selected as one the Army’s first-ever Cyber Warrant Officers, a distinction bestowed upon only 22% of more than 200 qualified applicants
●	Participated in two incident responses that were each national-level news at the time, providing technical input and guidance based on previous experience; the end result of each was that no other additional artifacts were found that could be correlated with the initial vector of compromise
●	Provided input on risk mitigation plan that was turned over to each customer after two major incident responses by the team

Cyber Operations Technician and Senior Technical Advisor

●	Provided cybersecurity oversight for one unclassified and two classified Department of Defense networks supporting 9,000+ users and 27,000+ systems
●	Executed monthly internal audits on all aspects of the home-station classified network for non-compliance, finding and remediating an average of ten items per month
●	Supervised a four-person team consisting of military personnel and civilian contractors who provided information security support coverage 24 / 7 / 365 in Afghanistan for one year
●	Performed weekly vulnerability assessments for 5,000+ non-standard systems on three logical networks, ensuring software compliance and security in accordance with Department of Defense guidelines
●	Managed and closed out 75 security incidents over a 12-month period at an average of only 5 days per incident, a 200% decrease over the previous average of 15 days
●	Created, submitted, and tracked progress on the risk register for over 500 classified systems
●	Implemented a new enterprise vulnerability assessment suite which had the direct impact of automated reporting, greater visibility, and faster remediation for vulnerabilities on over 3,000 systems across five sites
●	Served as a voting member of the Change Management/Configuration Control Board
●	Used a variety of sources such as Windows event logs, DHCP logs, proxy logs, and network device logs to correlate network violations when an incident occurred
●	Worked extensively with eEye Retina and Tenable Advanced Compliance Assessment Solution vulnerability assessment suites
●	Utilized NMAP to conduct network scans for devices serving unauthenticated web pages; 75 devices were ultimately found and had their web page functionality secured or disabled, leading to a reduced attack surface
●	Assisted authorized foreign nationals in gathering the necessary information in order to gain network access

Information Assurance and Cyber Security Manager

Completed training in the Defense Information Security Program which consisted of Securing Windows; Intrusion Detection In-Depth; Hacker Techniques, Exploits and Incident Handling; Auditing Networks, Perimeters and Systems; Network Penetration Testing and Ethical Hacking; Computer Forensics, Investigations, and Response; IPv6 Security Essentials. Also received training in planning and integrating the Host Based Security System(HBSS); Python Scripting for Penetration Testers; IA tools; RAD-X; Linux Security; Cyber Law; Basic Computer Network Operations Planners Course (BCNOPC); Virtualization Security Fundamentals; Firewall Security; Client Exercise; Perimeter Exercise and Capstone. Ian demonstrated superior ability to integrate critical thinking skills during the capstone which included focused research, planning, coordinating, integrating, synchronizing, and conducting activities to: lead day-to -day defense, protection and response to cyber attacks of DOD information networks. Received certifications in GIAC Certified Windows Security Administrator, GIAC Certified Intrusion Analyst, GIAC Certified Incident Handler, GIAC Certified Penetration Tester, GIAC Systems and Network Auditor, and GIAC Certified Forensics Analyst courses.

Information Protection Technician Student

● Engineered and managed a unique, fiscally responsible, and secure network infrastructure which enabled the departure of 40,000 users from Iraq to Kuwait at the end of Operation New Dawn 
● Senior military technician for US Forces-Iraq J-6, directed and supervised tactical network engineering, integration, and troubleshooting for all units in Iraq, providing network connectivity for 40,000 users
● Managed an extremely complex, tiered Border Gateway Protocol (BGP) environment that contained numerous VPN connections
● Managed all aspects of three networks, including router/switch/firewall configuration, secure template configuration, firmware patching, and regular device logs review 
● Oversaw the timely migration of 151 ground terminal connections to a newly orbiting satellite, which prevented a loss of vital communications for all organizations still operating in Iraq at the time
● Worked on a five-person team that designed, engineered, and managed five executive communications packages at a cost savings of $125K over a comparable commercial solution that became the de-facto standard for organization executives when traveling
● Automated network device configuration backups via a method that required no additional software to be purchased, was cost-feasible, and led to 95% less downtime in the event of device failure
● Created standardized and secure router, switch, and firewall templates derived from DoD guidelines that were used to provision any devices expected to be placed into production, which vastly increased the overall security posture of the network infrastructure
● Worked on Cisco ASA, PIX, Unified Communications Manager, distribution and access layer devices, along with a wide variety of encryption technologies
● Devised an ingenious method of using SNMP traps provided by a newly-installed power system that could send unclassified email alerts to phones; saved several hours during an outage of the datacenter cooling system prior to a major exercise

Network Engineer

Assigned as platoon sergeant of a Joint Network Node platoon of a Light Infantry Brigade Combat Team Signal Company; responsible for the morale, health, welfare, training and professional development of five NCOs; supervises all aspects of training and maintenance; assists and advises the platoon leader in all matters concerning the platoon; responsible for the accountability and readiness of ten vehicles, four trailers, four generators, and three signal systems valued at $2.9 million.

Also served 12 months as Rear Detachment Company Commander of a Light Infantry Brigade Combat Team Signal Company; responsible for the training, morale, health, and welfare of three NCOs and eight Soldiers; assists and advises the company commander on areas of responsibility directly related to the rear detachment; responsible for the accountability of forty pieces of rolling stock, twenty pieces of CCI, two tool kits, and other accountable items valued at $2.35 million.

Platoon Sergeant

Highly qualified professional with over 15 years of proven experience in multiple aspects of Cybersecurity, including secure network engineering, network security auditing, vulnerability assessments, incident handling, and risk mitigation planning. Has a proven ability to design and troubleshoot complex network security architectures that are aligned with business needs. A highly trusted leader and mentor with a proven ability to achieve timely results on critical enterprise-level projects given limited resources. Has the experience and training needed to succeed in multiple Cybersecurity and Information Assurance roles.

Taplio

Ian Mains's Linkedin Analytics

Ian Mains

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Ian Mains's Linkedin Analytics

Ian Mains

Want to drive more opportunities from LinkedIn?

Ian Mains's Linkedin Analytics