Amandeep Singh

Control Assessment · Authorization Packages

Senior Cyber Security Analyst

MindPoint Group

• Conduct security control assessment using NIST 800-53A guidance for various Information Technology systems and Cloud Solutions.
• Develop and update security authorization packages in accordance with FISMA and the client’s requirements.
• Monitor, identify and report security risks within the Group's information technology domain. Perform regular risk assessments and monitoring to enforce clients' security policies and procedures, reducing the overall security risks of the IT assets.
• Present security findings to various intelligence and acquisition community audiences to increase awareness of security risks and the implementation of security controls.
• Assist with quarterly assessments of testing, control effectiveness, residual risk, and risk metrics and encourage proactive identification of weaknesses and/or control gaps, while providing sound recommendations to address control gaps.

SCA · Department of State ISSM

Senior Cyber Security Engineer / Security Control Assessor

SAIC

• Served as principal cybersecurity advisor to the Department of State’s ISSM, partnering with system owners, engineers, and program offices to assess and accredit information systems supporting U.S. foreign policy missions through rigorous NIST SP 800-53A control assessments and risk-based recommendations.
• Led the migration of security control implementations and authorization documentation to align with updated FedRAMP requirements; mapped existing controls to revised baselines, identified inheritance opportunities from authorized CSPs, and delivered remediation roadmaps that closed gaps without disrupting operations.
• Operated Xacta 360 as the system of record for GRC activities—centralizing control libraries, evidence artifacts, and POA&M tracking; streamlined the A&A workflow and produced reporting that gave senior leadership clear visibility into the authorization portfolio and residual risk posture.
• Authored comprehensive FedRAMP documentation including System Security Plans (SSPs), policies, and procedures aligned to the NIST SP 800-53 control catalog; collaborated with CSPs to clarify shared responsibility boundaries, resolve technology gaps, and harden the enterprise defensive posture.
• Conducted detailed risk assessments and security impact analyses across the SDLC; quantified residual risk to confidentiality, integrity, and availability and provided strategic security guidance to senior leadership during FISMA audit cycles and authorization renewals.

Information Assurance · Fort Belvoir, VA

Information Assurance Security Specialist

AnaVation LLC · Fort Belvoir, VA

• Engineered iterative security test and re-test methodologies for Army Night Vision and Electronic Sensor Systems; aligned control validation to system CONOPS, exercised controls against operational use cases, and documented evidence sufficient to support accreditation decisions for fielded systems.
• Provided security engineering support to ISSMs and ISSEs accrediting an AI-enabled imaging platform built on a Hadoop environment; assessed control implementations across the data pipeline, evaluated cluster hardening against authentication, encryption, and access governance requirements, and contributed to secure deployment in Army operational environments.
• Developed custom hardening baselines for emerging AI/ML technologies where no formal DISA STIG existed—cross-referencing NIST SP 800-53 controls, CIS Benchmarks, and vendor security guidance to define configuration standards that engineering teams adopted across the program.
• Facilitated assessment-only accreditation of software toolsets supporting Army field deployments, validating that each release met Information Assurance requirements and produced evidence aligned to Army certification authorities.

ISSE · Navy Qualified Validator · Quantico, VA

Sr. Information System Security Engineer (ISSE) / Navy Qualified Validator

Kforce Inc · Quantico, VA

• Managed the full A&A lifecycle for multiple NCIS information systems in eMASS and Xacta; prepared and maintained authorization packages from initial categorization through accreditation and continuous monitoring while coordinating with system owners on POA&M remediation and ongoing risk acceptance decisions.
• Performed Security Control Assessor (SCA) and Information System Security Engineer (ISSE) functions; developed and executed security test plans, validated NIST SP 800-53 control implementations against DoD and Navy IA requirements, and produced Security Assessment Reports documenting residual risk for command authorities.
• Engineered defensive security solutions for NCIS information systems operating in classified environments—integrating controls and countermeasures aligned to mission needs for identity, network segmentation, and data protection across the enclave.
• Led DIACAP-to-RMF transition efforts on multiple inherited authorization packages; reconciled DIACAP IA controls to NIST SP 800-53 control families, rebuilt authorization documentation to meet DoD 8510.01 expectations, and maintained a defensible security posture throughout the migration.

ISSE · Quantico, VA

Sr. Information System Security Engineer

Secure Innovation · Quantico, VA

• Executed end-to-end RMF and DIACAP A&A lifecycle management across DoD and Navy environments; drove systems to Authority to Operate (ATO) using eMASS, Xacta, and MCCAST in compliance with DoD 8500.01 and applicable NIST publications, tracking authorization artifacts to defensible baselines.
• Conducted comprehensive vulnerability assessments and compliance scans across classified IT environments using Tenable Security Center and ACAS/Nessus; analyzed scan output to distinguish exploitable findings from informational noise, produced detailed risk reporting for system owners, and drove targeted remediation aligned to operational priorities.
• Led PCI-DSS compliance audits and merchant system scoping assessments; defined the cardholder data environment (CDE) boundary, mapped controls to PCI-DSS requirements, and delivered remediation recommendations to system owners ahead of formal QSA review.

IT Specialist · Washington, DC

IT Specialist / Cyber Security Engineer

DELTA Resources, Inc. · Washington, DC

• Partnered with NAVSEA ISSEs to develop strategic plans that accelerated RMF Assessment and Authorization timelines; identified package gaps early, sequenced control implementations against authorization deadlines, and kept multi-system portfolios on track.
• Reviewed critical A&A package artifacts including Security Plans (SP), SAPs, and Risk Assessment Reports (RARs); validated control narratives against actual implementations, ensured artifact consistency across the package, and confirmed readiness before submission to the Navy Authorizing Official (NAO).
• Performed vulnerability and risk analysis using Endpoint Security Suite (ESS/HBSS) and ACAS/Nessus; correlated findings across host and network scans to characterize the security health of accredited information systems and surfaced systemic issues that single-tool views often missed.
• Coordinated with system points of contact to implement mitigation strategies and update authorization plans; tracked POA&M closure progress, ensured residual risk remained within accepted thresholds, and maintained the security and operational health of naval networks and applications.