Security leadership. Technical depth.
Information Systems Security Manager
Whitman, Requardt and Associates · Sep 2024 — Present
I connect the details inside a network with the decisions that protect it. My work brings together security engineering, risk management, and intelligence.
1,100+Users reached
100+Critical vulnerabilities
ATOWithout deficiencies
INTELLIGENCEENGINEERINGASSURANCEUnderstand the system.
Strengthen what matters.
Experience across
mission-driven organizations
U.S. MILITARYSpecial operations & Air National GuardThe work I do
From network behavior to executive briefings, I work across the technical and organizational sides of security.
Build defensible security programs, translate requirements into controls, and prepare systems for authorization and assessment.
Understand how systems behave, validate weaknesses, and make remediation practical for the people who run them.
Connect network activity, threat context, and evidence into clear findings that support operational decisions.
Selected contributions
1,100+
Security awareness campaigns designed and executed through KnowBe4 at WRA.
Security leadership100+
Identified and helped remediate across client engagements with InFocus Consulting.
Penetration testingATO
Authorization achieved through end-to-end RMF activities across WRA network enclaves.
Assurance & authorizationProfessional experience
Security leadership, consulting, engineering, and military service. Explore each role for responsibilities and technical detail.
Current roleWhitman, Requardt and Associates
Sep 2024 — Present
Leading information assurance and network security across multiple enclaves, connecting technical controls with authorization, assessment readiness, and incident response.
Lead information assurance and network security programs for multiple information systems, driving end-to-end RMF activities across multilevel network enclaves.
Implement NIST 800-171 controls and CMMC requirements, coordinating with managed security and service providers to develop the enclave SSP and supporting artifacts.
Use Nessus and SCAP benchmarks to assess enterprise configurations and system architectures, identify security gaps, and drive remediation across federal and state contracts.
Apply DISA STIGs and CIS Benchmarks to network devices and servers. Develop custom hardening strategies for systems that lack formal guidance.
Integrate Arctic Wolf, Splunk, Windows Defender, and Palo Alto Cortex to centralize network analysis and support incident detection across multiple enclaves.
Author the corporate Incident Response Plan and coordinate cross-functional response, external forensics, legal engagement, real-time timelines, and executive briefings.
Design and execute KnowBe4 campaigns for 1,100+ users and all cleared personnel to support secure enterprise network use.
Analyze and map enterprise enclaves, traffic flows, and misconfigurations to support red-team and assessment planning.
InFocus Consulting
Feb 2023 — Feb 2025
Testing systems, networks, and web applications to turn exploitable weaknesses into clear, actionable remediation work.
Performed authorized penetration testing and exploitation of systems, target networks, and web applications using advanced testing methodologies.
Used Burp Suite and Qualys to discover, validate, and document network and application vulnerabilities.
Developed exploitation-focused test plans based on threat intelligence and risks to client infrastructure.
Produced comprehensive reports through Dradis and PlexTrac, and worked with developers and system administrators to resolve findings.
Maintained current knowledge of vulnerability advisories, incidents, exploitation techniques, and assessment best practices.
Lockheed Martin
Feb 2021 — Apr 2024
Building and hardening infrastructure, automating configuration, and connecting vulnerability intelligence with global remediation.
Configured and deployed Palo Alto firewalls, applying DISA STIGs and knowledge of ports, protocols, and OSI-layer behavior to harden networks.
Built and managed administrative virtual machines, including Identity Management and ELK stack instances, to improve visibility and system performance.
Developed Ansible playbooks for device configuration and network and systems administration, supporting consistent compliance across enclaves.
Supported incident response and forensic investigations with Arctic Wolf, including timeline reconstruction and technical findings for stakeholders and legal teams.
Validated HackerOne submissions, coordinated global remediation, and tracked findings in Jira.
Used Recorded Future and open-source intelligence to assess cyber threats and produce actionable reports for senior leadership.
Analyzed firewall and ELK telemetry to identify anomalous behavior, support metadata-driven analysis, and inform remediation and hardening.
Booz Allen Hamilton
Mar 2019 — Feb 2021
Translating network, communications, and blockchain analysis into intelligence for DoD and law enforcement stakeholders.
Conducted cyber intelligence and digital network exploitation research, including blockchain transaction investigations, to identify risks and target communications.
Profiled adversary infrastructure using open-source and classified sources to support intelligence requirements and operations planning.
Delivered actionable intelligence and briefings for strategic planning, target development, and cybercrime prevention.
Analyzed metadata, researched targets, and contributed to global network analysis and mapping to maintain target continuity.
U.S. Army Special Operations Command & Tennessee Air National Guard
Aug 2013 — Present
A foundation in mission support, signals intelligence, and technical problem-solving, spanning network analysis and an early career in aircraft avionics.
Provided 24/7 signals intelligence and cyber intelligence support, including analysis and mapping of adversary digital communications and network infrastructure.
Supported red-team efforts and Computer Network Exploitation operations to identify vulnerabilities and enhance mission effectiveness.
Analyzed SIGINT and cybersecurity data across the OSI stack and delivered actionable intelligence products and high-interest briefings.
Researched target technologies, digital communications, and network topology to support access and exploitation analysis.
Analyzed collection and open-source data to profile target activity, maintain continuity, and develop additional cyberspace information.
Performed troubleshooting, preventive maintenance, and calibration of military aircraft avionics in an early-career technical role.
Tools & technologies
A practical toolkit spanning assessment, engineering, monitoring, intelligence, and reporting.
17 tools
Enterprise vulnerability analysis and remediation prioritization.
AssessWeb application testing, vulnerability validation, and exploitation.
Scanning and assessment of network and application security.
AssessSubmission validation and coordinated vulnerability remediation.
MonitorCentralized telemetry and security monitoring across enclaves.
Threat monitoring, incident response, and forensic coordination.
MonitorThreat monitoring and incident detection across enterprise environments.
Endpoint protection within enterprise detection and response workflows.
MonitorLog infrastructure, network visibility, and telemetry analysis.
Threat intelligence research and reporting for leadership decisions.
EngineerAutomated configuration, administration, and compliance consistency.
EngineerNetwork infrastructure deployment, hardening, and traffic analysis.
Configuration assessment against defined security benchmarks.
Structured assessment findings, impact, and remediation reporting.
Clear vulnerability reports and actionable remediation recommendations.
DocumentTracking security findings and coordinated remediation work.
Security awareness campaigns across a 1,100+ user organization.
Tools are shown in the context of my experience. Select a tool name to visit its official website.
Education & credentials
Industry certifications, specialized military training, and continuing study in cybersecurity and information assurance.
CompTIA · 2024
Cybersecurity certification
About this certification
CompTIA · 2025
IT support certification
About this certification
In progressBachelor’s degree
Western Governors University
Specialized training
Formal training from intelligence fundamentals and cyber analysis to electronics and avionics.
Department of the Navy
Community College of the Air Force
Community College of the Air Force
Community College of the Air Force
Community College of the Air Force
Get in touch
For professional opportunities and conversations about cybersecurity, engineering, and intelligence.
⌖ Draper, Utah