Justin Njus

Cyber Security at MITRE

United States

Details

Education: Master of Science - MS

Information Technology, conc. Information Security

Southern New Hampshire University

2019 : 2023

Bachelor of Science - BS

Criminal Justice, conc. Business Administration

University of Massachusetts Lowell

Experience: • Built multiple Windows, Linux, and ESXi provisioning frameworks (e.g., iPXE, WinPE, Kickstart, etc.)

• Built and maintained several air-gapped patch repositories (e.g., Offline WSUS, PDQ Deploy, etc.)

• Worked with Program Managers to align end-user needs with RMF compliant hardware & software.

• Automated lower tier RMF continuous monitoring tasks with Ansible, PowerShell, and Bash scripts.

2021 : Present

MITRE

Lead Cybersecurity Systems Engineer

• Coordinated, filmed, and edited everything from weddings to ceremonial hikes up NH 4,000 footers.

• Maintained FAA Part 107 certification and a fleet of drones for aerial cinematography.

• Utilized Adobe Premiere Pro, Photoshop, After Effects, Lightroom, etc. for creative work.

• Restoration of damaged photography and digital archival of tape media (e.g., VHS, 8mm, etc.)

2015 : 2022

Creative Heights Media

Owner / Principal Videographer & Remote Pilot

• Increase efficiency by pairing IT software and scripts to IA Continuous Monitoring (CONMON) tasking.

• Manage classified deployment and support for McAfee ePolicy Administrator for 500+ hosts.

• Provide use-case and justifications for hardware & software in support of challenging authorizations.

• On-demand support for collateral and program users for authentication, hardware, and software issues.

2019 : 2021

MIT Lincoln Laboratory

Systems Administrator

• Building/Imaging, virtualization, and provisioning using a variety of COTS and open source tools (e.g. Windows Group Policy, CloneZilla, Windows MDT, Ansible, VSphere, Hyper-V, etc).

• Continuous monitoring of secure, accredited environments via SCAP and Nessus.

• Well versed in mixed OS environments (e.g. Active Directory joined Linux systems).

• Configure firewalls and annually review ports, protocols, and services.

• Test backups monthly and scan for WiFi penetrations in secure areas.

• Native IS audits (e.g. event viewer, auditd, syslog) and SIEMs (e.g. Splunk)

2017 : 2019

Systems & Technology Research

Information System Security Engineer

Work directly with the research community to ensure that applicable classified information security requirements are implemented and maintained.

• Facilitate and oversee information systems accreditation .

• Participate in security compliance audits and vulnerability assessments.

• Coordinate and participate in the investigation and mitigation of IS security incidents.

• Participate in network architecture design and review to ensure security requirements are met.

• Provide detailed security education briefings when required.

2016 : 2017

MIT Lincoln Laboratory

Information System Security Manager

Company: MITRE

Years of Experience: 17

Skills Adobe Creative Suite, CentOS, Communication, Computer Science, Criminal Justice, Cyber Command Readiness Inspection, Defensive Driving, DoD, Emergency Management, Emergency Medicine, ePO, ePolicy Orchestrator, Executive Protection, Firearms, Hazardous Materials, HBSS, Industrial Security, Information Assurance, Information Security, Java, JPAS, Linux System Administration, NESSUS, NISPOM, Operating Systems, Outages, Patch Management, Physical Security, PowerShell, Public Safety, PXE, Red Hat Enterprise Linux (RHEL), SCAP, Scripting, Security Clearance, Security Management, Security Operations, Server Admin, Server Administration, Shell Scripting, SIPRNET, Troubleshooting, U.S. Department of Defense, Vulnerability Assessment, Windows Deployment Services (WDS)

About A former public servant turned 8570 compliant (IAT II) cybersecurity professional. I am TS eligible, have a current SSBI, and carry diverse experience across the Defense Industrial Base (DIB). Currently I support multiple Special Programs while completing graduate coursework in IT/Cyber Security. With additional bandwidth, I would continue leveraging object-oriented programming to automate enterprise IT tasks (scripting is, dare I say, FUN).