Summary
Overview
Work History
Education
Skills
Certification
Timeline

Brittany Phillips

Fayetteville,North Carolina

Summary

Background includes supporting systems needs for the Federal Government with an active Top-Secret Clearance. 10 Plus years of experience with the Department of Defense at Fort Bragg, NC and Remote. Top strengths include vulnerability remediation, information systems auditing, and telecommunications. Certified in Cybersecurity, Cloud, and Business functions.

Overview

10
10
years of professional experience
1
1
Certification

Work History

Event Coordinator, Social Media Marketing Specialist, Photo Booth Attendant

PB Productions
Fayetteville, NC
08.2016 - Current
  • Veteran-owned and operated entertainment business that provides coordination and setup for digital entertainment services.
  • Provides promotion, audio and visual displays, music, karaoke, lighting, mixing, and recording for public events, private events, promotions, weddings, parties, dances, military balls, and corporate functions
  • Installed industry recognized equipment AV equipment and utilized techniques for manipulating prerecorded audio, video, and lighting sequences
  • Adjusted lighting and camera focus to promote high-quality photos
  • Post content on social media to engage potential, current, and past clients (Facebook, Instagram)
  • Create graphics and flyers for marketing purposes (Canva, Photoshop, Adobe Creative Cloud)
  • Managed social media accounts on day-to-day basis to increase company recognition by creating engaging content.
  • IT troubleshooting on-site if necessary
  • Create and adjust rehearsal and day of itineraries
  • Worked closely with couples to meet wedding goals, maintain deadlines and resolve complaints or service issues
  • Attended over 100 weddings, military balls, and birthdays/Quinceanera's
  • Make recommendations on music selection, vendor choices, and budgeting.
  • Managed administrative logistics of events planning, event booking, and event promotions
  • Assisted guests with booth instructions and operation, answering questions and delivering personable service.
  • Hired, trained, and supervised volunteers and support staff required for events
  • Boosted reach by creating digital content, managing schedules, maintaining social media accounts, and reporting analytics to measure engagement.
  • Inspected event facilities to confirm conformance to customer requirements.

Assessment and Authorization Analyst

NexGen Data Systems, Inc
Fayetteville, NC
04.2022 - 11.2022
  • Provide qualified and certified sustainment support personnel knowledge on respective systems/applications/enclaves to perform cyber security functions.
  • Operate in an AWS environment (PaaS)
  • Support outlying locations both unclassified and classified
  • NIPR, DMZ Architectures, and Cloud-Hosted CSPs
  • Identify IA requirements prior to customer migration, during, and after post-migration
  • Create Bulk Memorandums for Records for mission owner playbooks and overview of projects
  • Ensure Information Assurance Vulnerability Alert Management (IAVM), CTO, STIG compliance, and reporting are maintained
  • Maintain security compliance for infrastructure and tracking of patching in an enterprise environment
  • Maintain A&A Packages under the Risk Management Framework for common control provider and information system owner packages
  • Create meetings for slide deck working groups, collaborate with technical subject matter experts, adjust presentations in real-time for briefings to Authorizing Official
  • Notate meeting minutes for all meetings at the NAO level
  • Hand selected to conduct meeting minutes at NAO level due to precision and level of detail
  • Increased policy protection for over 50 information systems.
  • Ensure Sustainment Team is notified of new STIG releases and implementation
  • Execute security scans and provide vulnerability assessments

Cybersecurity CND/Auditor

Prime Technical Services
Fort Bragg, NC
10.2021 - 03.2022
  • Perform functions relevant to Step 3 of the Risk Management Framework as ISSO in eMASS
  • Upload CKL (checklist, STIG) files in eMASS and identity host and nicknames for parent and ‘children’ devices
  • Download reports from ACAS to upload ASR/ARF documents into eMASS
  • Cross reference and update Hardware/Software lists for ATO packages
  • Request documentation pertaining to system security plans (SSP): network boundary diagrams, signed memorandums, signed TTP
  • Attend weekly battle rhythm meetings for endpoint security, eMASS statuses, and cybersecurity operations
  • Help establish SOP for daily cyber functions
  • Create and update incident tickets via Service Console Manager
  • Attach CSV files for system administrators to patch devices and be aware of the system attack surface
  • Vulnerability and SCAP scanning workstations, servers, storage, and network devices
  • Reporting to government leadership based on zero-day exploits, IAVMs, and Pre/Quarantine lists
  • Consulted clients on internal control systems development and audit program improvements.
  • Prepared working papers, reports and supporting documentation for audit findings.

Cybersecurity Control Assessor

CACI
Fort Bragg, NC
03.2021 - 09.2021
  • Selected as primary VTC SME, Primary SharePoint Site Manager SME, Secondary ACAS SME
  • Vulnerability, SCAP, Discovery Scans via Tenable, Account unlocking, CCRI Scoring
  • Assess IATTs and ATOs in eMASS as the ISSO, SCAR roles, Steps 4-6 of the Risk Management Framework
  • Primary publications include NIST 800-53A and 800-37
  • Evaluate management, operational, and technical test results from ISSOs
  • Attaching associations when necessary
  • Providing unbiased, professional feedback on the confidentiality, integrity, and confidentiality of systems
  • Documentation reviewed includes internal policy, NIST, DISA, USCYBERCOM, USSOCOM
  • Create ATOs for Private and Dedicated Circuits (L3VPNs) and then upload for signature from AO in DTT
  • Attend Configuration Management Boards and provide risk analysis on possible vulnerabilities
  • Assist with decommissioning systems and/or IATT extensions
  • Generate software certifications for new or upgraded software on the network
  • Update approved software list
  • Updating tickets and taskings via ServiceNow
  • Main expertise, eMASS
  • Secondary: XACTA.
  • Worked well in a team setting, providing support and guidance.

Information Assurance Analyst

Lucayan Technology Solutions LLC
Fort Bragg, NC
09.2019 - 03.2021
  • Primary duties include using Tenable© Software Center to pull reports from ACAS. SOF-U, SOF-S Networks
  • Review and document monthly discovery scans for systems that are/are not permitted to be on the network; adjust IP scopes as necessary. Report up to appropriate staff.
  • Remediation scans after SCCM Manager patches endpoints. Communicate scan results once completed.
  • Update Active IAVMs released by DISA on a weekly basis; cross-reference ACAS with several endpoints affected by IAVMs. The report generated was sent up to the USSOCOM level to be used as a baseline to other TSOCs
  • Create hardware and software memorandums for new items/products that are requested to go on the network. Research why products should or should not be on the network. Send up for approval at the ISSM level
  • Calculate CCRI scores produced from hosts scanned every week. Determine if the score is passing or failing. Qualitative data was sent to the lead of cyber to remediate. Scores are sent to each site for oversight.
  • Reports for battle rhythm include 25+ (systems with 25 or more vulnerabilities), Top 10 IAVMs, and DCGS. Reports are forwarded to the cyber lead daily.
  • Scan Nodes to determine if the unit is passing or failing their projects and patching. Send reports to RMF/ A & A Team to submit in eMASS.
  • Assist customers with WCF (Web Content Filtering) forms. Confirm blocked websites are needed for unit operation, send up to GS14/05 Level
  • Educated and trained users on information security policies and procedures.
  • Drafted security reports and metrics to track security performance and strategize improvements.

System Administrator

Volt Workforce Solutions
Fort Bragg, NC
05.2019 - 09.2019
  • Primary duties include using Tenable Software Center to pull reports from ACAS
  • SOF-U, SOF-S Networks
  • Review and document monthly discovery scans for systems that are/are not permitted to be on the network; adjust IP scopes as necessary
  • Report up to appropriate staff
  • Remediation scans after SCCM Manager patches endpoints
  • Communicate scan results once completed
  • Update Active IAVMs released by DISA on a weekly basis; cross-reference ACAS with several endpoints affected by IAVMs
  • The report generated was sent up to the USSOCOM level to be used as a baseline to other TSOCs
  • Create hardware and software memorandums for new items/products that are requested to go on the network
  • Research why products should or should not be on the network
  • Send up for approval at the ISSM level
  • Calculate CCRI scores produced from hosts scanned every week
  • Determine if the score is passing or failing
  • Qualitative data was sent to the lead of cyber to remediate
  • Scores are sent to each site for oversight
  • Reports for battle rhythm include 25+ (systems with 25 or more vulnerabilities), Top 10 IAVMs, and DCGS
  • Reports are forwarded to the cyber lead daily
  • Scan Nodes to determine if the unit is passing or failing their projects and patching
  • Send reports to RMF/ A & A Team to submit in eMASS
  • Assist customers with WCF (Web Content Filtering) forms
  • Confirm blocked websites are needed for unit operation, send up to GS14/05 Level
  • Company, Monitor the status of services for critical warnings via SCOM
  • Email appropriate SMEs to update the statuses of server warnings
  • Update Morning Standup slides for appropriate SMEs (Battle Assembly Numbers, VIP Tickets, ASIs, etc.)
  • Display Secure Communication outages as new data occurs via Spectrum
  • Train Oncoming staff on daily operations
  • Fulfill DHCP Requests for workstations, printers, HVAS Systems (ESD Help Desk Interface)
  • Utilize Splunk for wireless events- Disconnect attacks and Power Save DOS
  • Taleos Intelligence and Hybrid Analysis use to determine how malicious URLs may be
  • Cross-reference Active Directory and ESD Tools to look up hostnames, IP Addresses, and dates a host was last scanned
  • Attended meetings to deliver status reports to key stakeholders.

Network Security Administrator

Jacobs
Fort Bragg, NC
04.2018 - 04.2019
  • Install and uninstall switches (Cisco)
  • Monitor switches that are local and remote sites supported by Commercial ISP- Troubleshoot outages with ISP
  • Orion SolarWinds; monitor status of all routers, switches, DMZs of all systems, modify maps based on location, and/or change, IP addresses (DHCP)
  • Use Aruba as the wireless controller
  • Watch traffic. Up to over 200 switches across the world.
  • See continuous client presence
  • Lookup physical addresses on Wireshark to determine the make/model of a system
  • This helps determine if a rogue device is a potential false positive or a threat
  • Write/alter access control lists for switches and routers
  • Search Kiwi logs for traffic warnings good and bad
  • Create accounts on Active Directory
  • Unlock accounts for clients
  • Troubleshoot hardware and software problems
  • Support via telephone or remote desktop
  • Use Cisco’s ISE for system security
  • Troubleshoot authentication errors

Telecommunications Technician

AERODYNE > L3 > CACI > JACOBS
Fort Bragg, NC
11.2012 - 04.2018
  • Assist and Schedule Bridge Calls for United States Army Special Operations Command (Unclassified and Classified)
  • Responsible for Master VTC Schedule (prevent conflicts, prepare for next day)
  • Coordinating with intermediate control centers, communication circuit providers, and distant end users to ensure successful VTC
  • (ex
  • Columbus Hub)
  • Provide and/or build teleconferences for customers on the MCU
  • Schedule VTCs using Cisco Telepresence Management Suite, Tandberg Codians, and the DISN Video Services-Global scheduler
  • Set up, troubleshoot, and monitor VTCs in local conference rooms and conduct communication checks
  • Create accounts for MOVI/Jabber Users through TMS Provisioning
  • Configure accounts and troubleshoot with customers
  • (Unclassified and Classified)
  • Gained account through CISCO to retain Licenses and Release Keys for Systems on the network
  • Upgrade Software (of all systems) through the Telepresence Management Suite
  • Experience with Crestron, Tandberg, Christie, AMX, Barco Equipment
  • Implement Configuration Templates to systems which also entails checking persistent settings.
  • Endpoint System Types include EX/C/MXP/SX Series Codecs
  • Provide Telephonic Support for the SIPR Bridge (MSE 8510) and NIPR (MCU 4510)
  • Create and test new site IDs through Global Video Service
  • Brittany Phillips Resume - 2
  • Collaborated with other technicians to troubleshoot and resolve technical issues
  • Worked closely with network administrators and server engineers to deliver quality service

Education

Bachelor of Science - Cloud Computing, None

Western Governor’s University, Salt Lake City, UT
06.2024

Bachelor of Arts - Sociology

University of South Carolina Aiken, Aiken, SC
05.2011

Skills

  • Tenable Nessus
  • Identifying Risks
  • Compliance with Security Requirements
  • Information Auditing
  • Administration and Reporting
  • Information Systems Examination
  • Risk Identification
  • Customer Feedback
  • Social Media Platforms

Certification

Certification Received: CompTIA CASP, Security+, CySA+, A+, Network+, Project+

Certification Number: COMP001021192371

Certification Received: Amazon Certified AWS Cloud Practitioner Certification Number: AWS03272087

Certification Received: Axelos ITIL Foundations

Certification Number: GR750468959BB

Certification Received: Linux Essentials

Certification Number: LPI000534629 PROFESSIONAL MEMBERSHIPS

Organization: ISACA

Membership Number: 1417672

Organization: Women’s Society of Cyberjutsu

Membership Number: 67642886

Organization: Women in Cybersecurity

Membership Number: 70946850

Timeline

Assessment and Authorization Analyst - NexGen Data Systems, Inc
04.2022 - 11.2022
Cybersecurity CND/Auditor - Prime Technical Services
10.2021 - 03.2022
Cybersecurity Control Assessor - CACI
03.2021 - 09.2021
Information Assurance Analyst - Lucayan Technology Solutions LLC
09.2019 - 03.2021
System Administrator - Volt Workforce Solutions
05.2019 - 09.2019
Network Security Administrator - Jacobs
04.2018 - 04.2019
Event Coordinator, Social Media Marketing Specialist, Photo Booth Attendant - PB Productions
08.2016 - Current
Telecommunications Technician - AERODYNE > L3 > CACI > JACOBS
11.2012 - 04.2018
Western Governor’s University - Bachelor of Science, Cloud Computing, None
University of South Carolina Aiken - Bachelor of Arts, Sociology
Brittany Phillips