NANCY J ANDERSON

Professional Experience

Website and database administration and support, design and implementation of Intranet and Internet web applications, and project collaboration work sites.
Perform OS hardening, IIS Hardening, patch management for IIS and SQL servers, and provide support for telecom personnel for intrusion detection signatures.
Lead code and policy reviews and documentation efforts for system and application security, including management reports, documentation standards, and a custom database application for detailed tracking of corporate infrastructure details.
Web applications including data entry and email notification applications, Electronic Payroll and Expense Check Stub applications using Visual Basic ActiveX components and ASP - accessing a DB2 database on AS400 system.
Design and programming for custom client/server billing application for RAS services using SQL Server 7.0 database, DTS, and PowerBuilder 7.0.
Technologies used: MS Security Configuration Tool Set (Security Templates, System Policy, etc.), IIS 4.0 and 5.0 with FrontPage 2000 Extensions, SQL Server 6.5, 7.0, 2000 supporting enterprise wide access - mixed mode security model, IBM AS400 Client Access Express, and Office Server Extensions.

Created automated process for Application Access Tracking Database by incorporated account lists from all major banking application and platform account lists.
Daily user account setup/maintenance and Help Desk support.

Coding, data-modeling, business workflow modeling and GUI design.
Designed architecture and testing procedures for upgrade of Enterprise applications from Powerbuilder 4.0 to Powerbuilder 5.0. Design and programming for custom Finance and Subscription Services PowerBuilder applications.
Worked as project analyst on out-sourced projects: gathered user requirements, coordinated user meetings and code and data-model reviews with internal IS staff and consulting firm staff.

Tutored Computer Information Systems and Economics classes.
Held office hours for Visual Basic classes to assist students on a one-to-one basis.

Security Tools: Microsoft Security Configuration and Analysis Tool, Custom Security Templates, Shavilk HFNetChkPro (ver. 3.7.5), and CIS Security Scoring Tool.
Enterprise Applications: Microsoft Internet Information Server 4.0 and 5.0, Site Server 3.0, and SQL Server 6.5 and 7.0. FrontPage 2000 Server Extensions and Office Server Extensions.
Programming Languages: Visual Basic (Microsoft, ver. 6.0), HTML (W3C 4.01), ASP (Microsoft, ver. 3.0), PowerBuilder (PowerSoft, ver.5.0, 6.0, and 7.0), Structured and OO Cobol (MicroFocus 32-bit for Windows), C++ (Microsoft, ver. 6.0), Magic (Magic Software, ver. 7.0).
Case Tools: Rational Rose 2001, Erwin (Platinum, ver. 3.5), HOW (Riverton, ver. 1.3).
Applications: Visual Interdev, Microsoft Office 2000 Professional Suite. FrontPage 2000, Desktop Publishing using Adobe FrameMaker 6.0.
General: command line - DOS, Linux, Unix: bash and csh. GUI and network environment - Microsoft Windows 9x, NT Server 4.0 and Windows 2000 Server, Linux KDE Windows.

SANS Institute, (http://www.sans.org) February 2002
Certificate: Securing Windows 2000 Professional - Gold Standard
SANS Institute, (http://www.sans.org) February 2002
Course: Hacker Techniques, Exploits and Incident Handling
SANS Institute, (http://www.sans.org) February 2002
Course: Securing Windows 2000 Networks
Westlake Internet Training, Arlington, VA September 2001
Course: Fundamentals of XML
Microsoft Sponsored Training, Apex Infotech Inc., Irvine, CA July 2001
Course: Administrating a Microsoft SQL Server 2000 Database
Rational University, Rational Software Corporation, Irvine, CA March 2001
Course: Fundamentals of Rational Rose
California State - University Extended Education, Fullerton, CA Spring 2000
Course: Web Server Administration

CALIFORNIA STATE POLYTECHNIC UNIVERSITY, POMONA
Bachelor of Science Degree in Computer Information Systems, 2000