Jacob Ferion

Background

About Jacob Ferion

8 years in Information Security Analyst/Security Assessor, Privacy and Data Security Management & Operations, Vulnerability Scanning, Certification and Accreditation (A&A), Project Management, NIST 800-53 Rev1 and rev4 and NIST SP 800-37 rev 1, 800-18, 800-53 rev3 and 800-34, FIPS, FISMA Security Content Automation Protocol, NIST Family of Security Control, FedRAMP Security Assessment Framework, POA & M, Incident and Contingency Planning. • Good exposure in Configuring Single instance, Oracle Real Application Clusters (RAC) and Automatic Storage Management (ASM). • Experience in installing and patching Oracle RAC with ASM on Linux platforms. • Expertise in setting up Data Guard Fail-Over/Switch-Over/Read-Only scenarios. • Good exposure of Oracle DBA tasks like Installation, Patching, Cloning and Upgrade of Oracle Databases. • Performed security scan on system using vulnerability-scanning tools using Tenable Nessus. • Utilize Nessus Tenable Security Center to consolidate and analyze all vulnerabilities and data gathered from multiple Nessus scanners, measure and evaluate security program effectiveness • Provided advisory services related to internal controls, Risk Assessments, Risk Management, IT controls and related standards (FISCAM, FISMA, NIST) • Managed vulnerabilities with the aid of NESSUS, Web Inspect as vulnerability scanning tools to detect potential risk on single or multiple assets. • Lead audits of Information systems, networks (physical, VM and cloud) to ensure compliance with FISMA, FedRAMP, NIST, and other IT compliance frameworks. • FISMA Security Content Automation Protocol • NIST Publication • Expertise in National Institute of Standards and Technology Special Publication (NIST SP) documentation: Performed assessments, POAM Remediation, and document creation using NIST SP 800-53 Rev.1 and NIST SP 800-53 rev.4. • Subject matter expert in creating and analyzing security documentation such as System Security Plans, Vulnerability Scans, Risk Assessment Plans/Reports, Visio diagrams, SOP's, Body of evidence, ATO's, POAM's, and other supporting IT documents to help make critical business decisions. • POA & M Remediation: Performed evaluation of policies, procedures, security scan results, and system settings in order to address controls that were deemed insufficient during Certification and Accreditation (C&A), RMF, continuous monitoring, and FISCAM audits. • Securing AWS technologies • Security Technology: NESSUS, Tenable, TAF, Xacta, CFACTS, CSAM, Webinspect, APPSCAN, SPLUNk • Securing AWS • Plublic Trust Holder