Teams at Devis

Lead 24x7 SOC operations and incident response including detection, triage, forensic analysis, containment, eradication, recovery, malware analysis, threat hunting, and CTI. Ensure incident reporting and evidence handling per NIST SP 800-86, coordinate with NIH leadership, configure SOC tools, run tabletop exercises, and produce forensic activity metrics and after-action reports.

Serve as primary Program Manager for NIH ISPSS, overseeing cybersecurity teams, contractors, governance, reporting, risk management, staffing, and delivery of FISMA/NIST-compliant security services. Manage schedule, budgets, SLAs, and stakeholder engagement while leading transition, incident support, and program reviews.

Lead and manage the RMF lifecycle and ATO process for federal systems under NIST 800-53 Rev.5. Develop A&A artifacts and authorization packages, maintain enterprise risk register and POA&Ms, drive continuous monitoring, support audits, provide RMF guidance to system owners, and coordinate risk reporting and remediation oversight.