Gil Huerta

Results-driven Cybersecurity Analyst with over 5 years of experience in cybersecurity operations, policy development, and compliance management. Proven track record of implementing NIST and RMF frameworks to safeguard critical assets and mitigate security risks. Possesses an active Top Secret Clearance with SCI eligibility (TS/SCI). Adept at leading cross-functional teams, managing vulnerabilities, and ensuring adherence to regulatory standards.

Currently pursuing a Master's degree in Cybersecurity Intelligence & Analysis. My passion for IT Security, coupled with my technical knowledge and experience, make me an excellent fit for organizations looking to secure their systems with a specialist who has quick learning potential.

National Oceanic & Atmospheric Administration (NOAA) 

Cybersecurity Analyst, IT Security Lead (Remote)Silver Spring, MD

Jun 2022 – Present• Scans and tracks vulnerabilities of over 2,000 end-user devices and web applications, using Qualys & Tenable.io Security Center, monitoring high- and critical-impact impact events of affected systems, and compiling findings in Looker Studio to track aging, risk scoring, and remediation efforts.

• Uses Tableau for compiling network activity and Windows log data, providing incident response team with insights into possible anomalous traffic and identify abnormal behaviors that may indicate insider threat risks, unusual login activity, or unauthorized data exfiltration.
• Publishes updates to Cybersecurity Awareness Training (CSAT) manual, facilitates annual training requirements, and leads working groups to edit current guidance documents for best practices on foreign travel with GFEs, mobile security, and identifying Insider Threats training.
• Maintains and edits a robust IT documentation library in CSAM including risk acceptance forms, IT checklists, and compliance documents such as contingency planning, security manuals, and cyber policy guidance.

International Services OfficeWashington, DCApplication Systems Administrator, Data Security (Hybrid)Feb 2021 – March 2024• Routinely audited privileged user access for all student/staff end-users to ensure least privilege at all levels and recertifying lapsed data privacy certifications for all system owners, managers, and advisers.

• Developed and improved mileage tracking capabilities for the Office of Sustainability, using Microsoft Power BI to measure the impact of greenhouse gas emissions, contributing to annual reports on the impact to climate change attributed to ~3,000 university travelers per year.
• Authored and maintained 100 Confluence (Atlassian) articles relating to enterprise IT application standards operating procedures (SOPs), providing an accessible knowledge base for staff to streamline operations, resulting in a 30% reduction in resolution times for technical/troubleshooting incidents in Zendesk.
• Published weekly data insights, using Google Analytics to monitor all study abroad application cycles and summarized user SIS data with Microsoft Excel pivot tables, tracking Department of State travel risk advisories for students studying abroad in high-risk countries to improve incident response

GW Writing ProgramWashington, DCDepartment Operations (Hybrid)Nov 2014 – Feb 2021• Facilitated virtual privacy and security awareness training for campus staff, resulting in stronger situational awareness and ensuring regulatory standards for compliance under NIST 800-171.

• Tested video-conferencing tools and designed guidance resources for users who were new to virtual learning environments, allowing for a smooth transition for 40 professors into remote instruction, with minimal impact on quality of education and reported user troubleshooting issues.
• Analyzed 1,100 student feedback surveys per semester to develop faculty performance metrics, refined departmental teaching objectives, and monitored graduate acceptance data to measure job placement of PhDs and Master’s students to the program’s investment in professional development opportunities, financial aid, and in-class teaching assignments.
• Spearheaded the creation of an in-house database containing up-to-date cyber protection best practices and strategies with 150 entries, aiding teams in proper security protocols.

Writing CenterWashington, DCTechnology Coordinator (Hybrid)Sep 2013 - Nov 2014• Oversaw the installation and networking of 10 new desktop computers (PC and Mac), resulting in continuity of tutoring services and reductions in user complaints and dated software.

• Troubleshot technical concerns of staff members to identify problems, optimizing system operations and increasing productivity by 30% for all workstations.
• Analyzed and resolved various IT requests, resulting in more dependable work-site technology, availability of up-to-date licenses, and improved staff morale.

SEAS Computing Facility

Washington, DCComputer Lab Technician (on-site)Oct 2013 - Mar 2014• Supported 300+ users with setting up licensed access to Microsoft products, restoring access to locked accounts, troubleshooting system malfunctions, and assisting with data recover and DBAN services.

• Implemented comprehensive software updates for 40+ Mac or Windows desktops & laptops per week.
• Contributed efforts to update the mounting system for all network cables within the lab facility.

MS, Security Intelligence Analysis (current)

Post-grad coursework: Cybersecurity Strategy & Information Management

BS, Political Science & Information Technology

Bootcamps

• CyberWarrior - CompTIA Security+
• INFOSEC - Certified Information System Auditor (CISA)
• SANS Institute - GSEC Fundamentals

Industry Certifications (in progress)

• CompTIA Security+, Scheduled (April 2024)
• ISC2 Governance Risk Compliance (CGRC), Scheduled (May 2024)
• Certified Information Systems Auditor (CISA), Scheduled (May 2024)
• Defensible Security Architecture Certification (GDSA), Scheduled (July 2024)