Sanjay Shantaram

Experience

• 

  PEC Solutions

  Jan 2000 - Jan 2003

  Information Security Analyst

  • Performed vulnerability assessments of clients’ security programs• Analyzed security documents to evaluate the client’s compliance with applicable policies and procedures• Engaged in data collection to assess the security posture of clients’ systems and their operating environment• Conducted physical security walkthroughs to determine any weaknesses in the overall physical security posture• Provided information analysis and assurance support through all phases of the Certification and Accreditation (C&A) process Show less

• 

  GSS, Inc.

  Dec 2003 - Jun 2004

  Information Security Analyst

  • Provided security analyst duties for the Center for Biologics Evaluation & Research (CBER) division of the Food and Drug Administration• Assisted in creating C&A documentation per NIST requirements. Developed certification packages for systems internal to CBER

• 

  CACI International Inc

  Jul 2004 - Dec 2014

  Lead Information Security Professional

  Responsible for: • Leading an IA team to conduct C&A efforts for varied systems• Developing a timeline for each C&A effort and managing it through the process• Providing IA team members with direction and assistance in providing IA services to customer• Direct point of contact for customer on all IA matters• Accountable for completion and quality of all IA deliverables• Hands-on experience with: STIGs, Physical Security Assessments (PSA), Retina, AppDetective, WebInspect, Security Content Automation Protocol (SCAP) Compliance Checker (SCC) tool, Enterprise Mission Assurance Support Service (eMASS) Show less

• 

  Emagine IT, Inc.

  Jan 2015 - now

  Senior Information Assurance Analyst

  • Providing A&A support to DoD clients• Participating in all test planning and execution activities, including meetings and working groups• Overseeing the development of test plans and other documents to ensure a successful A&A visit• Ensuring the use of appropriate tools to identify vulnerabilities and documenting residual risks • Providing timely status reports to the Government PM on progress/results