Charles C.

Nooks provides Classified-Infrastructure-as-a-Service (CIaaS), offering a nationwide network of accredited classified workspaces by subscription to enable cleared teams from industry and government to operate in classified environments without the multi‑year cost and wait of building SCIFs.

• Led site cybersecurity posture for an accredited classified facility, developing and enforcing access controls, network segmentation, and hardening standards for on‑prem and virtualized assets.
• Coordinated SCIF security requirements with facilities, physical security, and accreditation teams to maintain continuous compliance with accreditation criteria and site security plans.
• Established incident response and reporting procedures for classified and unclassified enclaves, including escalation paths to cleared leadership and external stakeholders.
• Performed risk assessments and vulnerability scans; tracked remediation through POA&Ms and coordinated mitigation with IT and facilities teams.
• Provided security awareness and cleared‑personnel onboarding focused on classified handling, OPSEC, and insider threat indicators.
• Partnered with mission and customer teams to balance operational availability with strict security controls in a subscription CIaaS environment.

ExoAnalytic Solutions is a scientific and engineering company delivering space domain awareness, analytics and mission systems to defense and commercial customers, specializing in advanced algorithms, sensing and modeling for the space and missile domains.

• Served as Information System Security Manager (ISSM) for program systems, owning RMF/A&A activities and maintaining continuous authorization posture.
• Developed and maintained system security plans (SSP), control implementations, and artifacts to support Authority to Operate (ATO) and contract deliverables.
• Directed continuous monitoring: coordinated vulnerability scanning, patching schedules, and log/alert tuning with engineering and operations teams.
• Managed POA&M lifecycle and coordinated remediation prioritization with program managers and stakeholders to reduce security risk exposure.
• Led user account and privileged access governance, ensuring separation of duties and adherence to least privilege for mission systems.
• Delivered security training and compliance briefings to program personnel and supported security-related customer reviews and audits.

U.S. Navy — the United States naval warfare service branch — provides global maritime power projection, operations, and support for national defense and security objectives.

• Acted as ISSM for Navy aviation program elements, implementing RMF processes and maintaining Authorization artifacts for afloat and shore-based systems.
• Coordinated cross‑organizational security assessments and mitigations with program offices, systems engineers, and C4ISR stakeholders to protect mission assurance.
• Managed secure configuration and baseline enforcement for mission systems and communications equipment in accordance with DoD/Navy policies and STIGs.
• Directed incident handling and reporting for operational systems, working with cyber teams to contain, investigate, and remediate compromises or anomalies.
• Supported certification and accreditation activities, including continuous monitoring, audit response, and evidence collection for Authorizing Officials.
• Advised leadership on risk tradeoffs between mission needs and cybersecurity controls to preserve operational availability.

Northrop Grumman designs, develops and sustains advanced aerospace, defense and mission systems—ranging from aircraft and spacecraft to C4ISR, cyber, and radar systems for national security customers.

• Served as ISSM on program(s) delivering mission systems, leading security governance and ensuring alignment to corporate and DoD cybersecurity requirements.
• Oversaw implementation of security controls across development, integration, and sustainment phases, coordinating with engineering, supply chain, and subcontractors.
• Managed vulnerability management and secure build processes, integrating security testing early in the lifecycle and reducing downstream findings.
• Prepared and presented security posture and risk briefings to program leadership and external stakeholders during design reviews and contract milestones.
• Implemented supply‑chain security practices and third‑party assessment coordination to protect program IP and sensitive sources/techniques.
• Supported cross‑program information sharing for cyber threats, lessons learned, and control improvements.

SAIC (formerly Engility) advances technology and engineering solutions for government customers, delivering mission support across defense, intelligence and civilian domains.

• Performed information assurance duties including STIG application, baseline configuration, and continuous monitoring for customer systems.
• Conducted vulnerability scans and coordinated remediation with system owners to maintain compliance with DoD/contract security requirements.
• Developed and maintained security documentation (SSP, contingency plans, incident response playbooks) to support audits and ATO efforts.
• Administered identity and access controls for enterprise systems, managing privileged accounts and role‑based access workflows.
• Provided user training and security awareness to technical staff and end users to improve compliance and reduce risky behaviors.
• Assisted program teams with security requirements translation into technical requirements and operational procedures.

USS ANTIETAM (CG 54) — United States Navy guided‑missile cruiser responsible for shipboard operations and mission support.

• Managed network security for two virtual LANs running on VMware supporting 15 servers and 250+ workstations, ensuring availability and integrity of shipboard IT services.
• Led and mentored a 12‑person team responsible for daily network administration, systems maintenance, and helpdesk support.
• Implemented and enforced baseline configurations, patch management, and hardening standards to meet Navy cybersecurity guidance.
• Maintained user account lifecycle, role assignments, and separation of duties to protect privileged access on ship systems.
• Developed incident response processes tailored to the shipboard environment, including escalation and reporting to command and shore authorities.
• Coordinated with engineering and operations to support classified and unclassified communication needs while preserving security posture.

NSA (Norske Systemarkitekter) is a Nordic IT consultancy specializing in service management, business intelligence, integration and system operations with expertise in Oracle and Red Hat technologies.

• Managed enterprise help desk and infrastructure operations for a geographically distributed customer base, overseeing incident, request and problem management processes.
• Directed infrastructure teams responsible for server virtualization, storage, and network services to meet SLA and availability targets.
• Implemented ITSM practices and tooling to improve ticket resolution, asset tracking, and change control across the enterprise.
• Coordinated vendor relationships and third‑party support to ensure timely escalations, hardware/service replacements, and contract adherence.
• Provided end‑user support and training, and documented operational runbooks and escalation procedures to streamline supportability.
• Conducted periodic capacity, performance and risk reviews to inform infrastructure investments and mitigations.

Commander, Expeditionary Strike Group 7 (Okinawa) — naval command responsible for expeditionary strike group operations and readiness in the region.

• Served as Force Information Assurance Manager, developing and enforcing enterprise IA policy and procedures across assigned units.
• Led force‑level risk assessments and coordinated accreditation activities for command information systems and mission enclaves.
• Oversaw compliance with DoD/Navy information assurance directives, ensuring timely remedial actions and reporting to higher echelons.
• Coordinated security training, insider threat briefings, and OPSEC campaigns across the force to raise awareness and consistent practices.
• Liaised with regional cyber and COMSEC authorities to align defensive measures with theater operations and incident response plans.
• Advised command leadership on cyber risk, operational impacts, and mitigation options during deployments and exercises.

Commander, Naval Networks and Space Operations Command — command focused on naval networks, communications and space‑related operations to enable naval warfighting capabilities.

• Acted as Information Systems Security Officer for naval network and space operations systems, enforcing security controls and monitoring compliance.
• Managed system hardening, STIG/STIG‑like implementation, and continuous monitoring to preserve mission integrity.
• Coordinated audits, log collection, and forensic support for network incidents and security investigations.
• Maintained configuration management and change control for critical network components and ensured documentation for accreditation purposes.
• Collaborated with cross‑functional engineering and operations teams to integrate cybersecurity requirements into system upgrades and deployments.
• Provided user access governance, authorization support, and training for operators of space and network systems.

USS ESSEX — United States Navy amphibious assault ship responsible for expeditionary operations and shipboard communications support.

• Supervised shipboard communications operations, ensuring reliable voice, data and messaging services in support of deployed operations.
• Managed maintenance and configuration of communication equipment and supported cryptographic/COMSEC requirements.
• Trained and led enlisted communications personnel in operating and troubleshooting tactical and administrative networks.
• Implemented protocols for secure transmission of classified and unclassified operational messages and coordinated with afloat/ashore networks for interoperability.
• Monitored network performance and coordinated repairs or workarounds to maintain mission communications during underway periods.
• Maintained logs, reports and readiness metrics to support command inspections and evaluations.

Special U.S. Liaison Advisor Korea — mission/liaison assignment providing technical and operational advisory support in the Republic of Korea.

• Served as Technical Controller and primary technical liaison between U.S. and host nation/partner technical staffs for communications and systems integration.
• Coordinated configuration, testing and fielding of communication equipment to ensure interoperability and security with allied systems.
• Managed classified information flows and ensured compliance with applicable handling and transmission procedures.
• Facilitated technical problem resolution across multinational stakeholders and documented lessons learned for future deployments.
• Supported training and technical handovers to partner organizations to sustain operational capability.

Commander, Patrol Wing 11 — naval aviation command responsible for maritime patrol and reconnaissance operations and associated communications/message processing.

• Operated as Message Processor responsible for handling, routing and safeguarding operational and administrative messages in support of maritime patrol squadrons.
• Ensured communications security procedures were followed for classified messaging and maintained message logs for traceability and audit.
• Coordinated with operations and intelligence cells to prioritize message flows and expedite time‑sensitive information.
• Maintained message handling systems and performed regular checks to ensure message integrity and delivery success.
• Trained personnel on message formatting, distribution protocols and COMSEC procedures to maintain operational readiness.