David Rundle Email & Phone Number

Fort George G. Meade, Maryland, United States

Led a team of experts in reviewing, documenting, and mitigating security vulnerabilities in both classified and unclassified programs that provided zero-day detection and mitigation for all of DoD.Coordinated team assignments and managed the scrum task management.Repaired the data entry system for the security data repository.Managed the team through.

Fort George G. Meade, Maryland, United States

Led a team of experts in reviewing, documenting, and mitigating security vulnerabilities in both classified and unclassified programs that provided zero-day detection and mitigation for all of DoD.Coordinated team assignments and managed the scrum task management.Repaired the data entry system for the security data repository.Managed the team through.

Annapolis Junction, Maryland, United States

Designed and reviewed end-to-end security solutions for large-scale cloud projects ranging in size from dozens of users within a branch office, up through and including the entire DoD, approximately 860,000 users.Worked closely with development teams to integrate security controls into the software development lifecycle, ensuring secure coding practices.

Baltimore, Maryland Area

Contractor with the Centers for Medicare and Medicaid Services; US Department of Health and Human Services; Woodlawn, MDDuties included - Static and dynamic analysis of malware code, developing threat protection strategies.- Designing and implementing a standalone malware analysis lab environment.- Forensic analysis of compromised computer systems..

Annapolis Junction, MD

Performed functional testing of advanced penetration testing tools across multiple diverse environments to validate if vendor's claims held up to real-world scenarios. Tools included Core Impact Pro, Metasploit Pro, and Burpsuite Pro.Deployed, configured, tested, and managed quick reaction cyber test environments to include routing, public IP management.

Bethesda, MD

Research, prototype, and develop detection rules and composite detection logic for Fidelis’ suite of advanced threat detection products, including Fidelis XPS in-line detection, and Collector, off-line traffic metadata analysis.Created a working feedback analysis system utilizing Splunk to review and analyze rule performance data and real-world malware.

Annapolis Junction, MD

Threat Information Enumeration DeveloperReview, enhance, and author threat information standards, specifically for the exchange of malware metadata and indicators between mission operation centers. Base MITRE standards of CybOX, MAEC, CAPEC, and STIX include my revisions and additions.Conceptual DeveloperCreated a prototype framework for automated malware.

NWS Headquarters, Silver Spring, MD / Nesdis, Suitland, MD

Reviewed systems security documentation, configuration, logs, and settings on computer systems at the National Weather Service Headquarters (NWS HQ) and the National Environmental Satellite, Data, and Information Service (NESDIS). This review was for system authorization in accordance with federal FISMA requirements, and included vulnerability assessments.

Linthicum, MD

Performed validation testing and forensic analysis of CNO/CNE tools for the United States Department of Defense.Conducted application security assessments for the Social Security Administration.Authored a whitepaper on PKI Certificate distribution methods.Performed security reviews on white-listed applications for the Internal Revenue Service.

Frederick, MD

Performed physical, systems, and application security assessments of hosting providers, financial institutions, and commercial companies to a custom set of criteria derived from ISO 27001, SOX/HIPAA/GLBA, and PCI standards.Completed certifications as a PCI auditor and VISA Payment Application assessor.Performed penetration tests using.

Columbia, MD

Created system security architecture and security concept of operations documentation for the United States Department of Defense.

Riverdale, MD

Established and managed the malware mitigation program from proof-of-concept to full deployment at 60+ sites, 1800+ workstations, and 230+ servers. Estimated cost savings were between $4 and $7 million dollars in business losses and mitigation activities.Worked with the US Department of the Treasury, Secret Service, and the Federal Bureau of Investigations.

Bachelor Of Science - Bs, Cybersecurity

High School Diploma, A.P. Computer Science, Honors Physics