Randy Bachman Email & Phone Number

Assist with vulnerability management/prioritization

Help developers implement application security vulnerability remediation

Ashburn, Virginia, Us

Manage penetration testing (Rapid7) including technical support and remediation assistance and monitoring.Assist with the development and implementation of Vulnerability Management Governance.

Washington, District Of Columbia, Us

Supported the development of VA cybersecurity policy with a focus on supply chain and zero trust.

Teaneck, New Jersey, Us

Ernst & Young, Application Security PM Remote PM supporting resolution of Application Security vulnerabilities. Support the resolution of all Infosec IA control findingsWestern Alliance Bank, Vulnerability Management Lead Phoenix, AZImprove and automate the vulnerability management processes. Technical lead for the Rapid7 INSightVM and Kenna security analysis teams.Navy Federal CU, Digital Application Security and Firewall Engineer Vienna, VAAzure DevSecOps Engineering, Firewall rule analyst.Wells Fargo, Application Security Champion and PM, Charlotte, NCPM supporting all aspects of Application Security. Supported all aspects of the EASP security requirements including annual reviews (DAST, SAST, Peer Review, Security Requirements) and associated training for 3 CIO's.

• Supported all aspects of Cybersecurity operations for SBA. Updated SOC incident response SOPs. Prepared daily, weekly and monthly reporting to the CISO.• Responsible for all the security operations and integration of threat analysis of the SBA including all the network infrastructure and system tools. • Developed processes for integrating newly developed MS Azure Security Center into daily detection and response operations for SBA. • Performed information assurance assessment and authorization analysis, primarily reviewing information assurance controls (NIST SP 800-53), and developing and conducting risk analysis supporting FISMA related tasks, for an AWS Cloud application in GovCloud for US Census. Developed Agile Security Stories supporting cloud security accreditation.• Performed information assurance assessment and authorization analysis, reviewing security assessments, developing and conducting risk analysis to translate that data into quantifiable information of the AO so he could make informed decisions concerning which systems to accredit, as well as, how to allocate limited resources to supporting FISMA related requirements for the FAA NAS.• Performed information assurance assessment and authorization analysis, security assessments, and made recommendations to the Information System Security Managers to bring their systems into compliance supporting FISMA related tasks. • Responsible for maintaining security posture status in the Government systems of record where this information can be reviewed by Approval Authorities or other external IA organizations when necessary. • Support the accreditation to migrate applications and physical systems for 16 information systems residing in DoD managed data centers to VMware virtualization platforms (DOD Cloud).• Utilized ACAS, Fortify, AppDetective and WebInspect scan results, as well as STIGs, SRGs and other checklists to assist in the prioritization of remediation and mitigation efforts.

Cybersecurity and Communications Reliability Division of the Public Safety and Homeland Security Bureau. Provide technical support for the CSRIC secure routing working group (BGP SEC and RPKI), DNSSEC and to the FCC in all areas of Cybersecurity. Additionally, working Cybersecurity issues and developing presentations, speeches and a web presence for IPv6, IT Supply Chain Risk Management (SCRM), LE monitoring, Congressional Hearings, Small Businesses and Consumers. Provide technical support to NLE and UCG.Reviewing all public safety communications systems to ensure that they are in adherence with the NIST Framework and assisting in the application of the Risk Management Framework (RMF) for Cybersecurity for Critical Infrastructure including FirstNet, PSAP, NG911,EAS and Public Safety Communications ICAM.

Arlington, Virginia, Us

Educate adult learners on the uses of military power at the operational and tactical levels in small collaborative seminars.The goal is to develop operational expertise in employing joint, inter-agency and multinational forces and capabilities in offensive, defensive, civil support, and stability and reconstruction operations. I facilitate four major instructional blocks: Foundations, Strategic Studies, Operational Studies, and Tactical Studies, while simultaneously incorporating three parallel courses throughout the entire CGSC core: History, Leadership, and Force Management (nearly 160 hours of different classes). Lead MBTI facilitator.

Us

Responsible to all security monitoring and response activities for the Small Business Administration. Run all IA tools (19 total) including firewalls, IDS, NAC software suites, Data Loss Prevention (DLP) and conducted vulnerability assessments.

Huntsville, Al, Us

Responsible for the comprehensive IA program at the Army’s Enterprise Systems Integration Program that links ERP and data warehouses in the Army. Served as the IAM/IASO and successfully prepared for and completed several inspections and assessments in minimal time. Developed a SAP application security program including the implementation to meet all STIG IA control requirements.

Bethesda, Md, Us

At LMMS, Mr Bachman supported the FAA CISO in numerous projects. The first project was the security requirements review of the contract to outsource the Air Traffic Control network backbone. Then he provided technical assistance and program management to more effectively employ the network IDS. He then helped design a data correlation tool that implemented a security architecture to correlate and analyze data from a wide variety of sensors. Most recently, assisting the HQ USAF in completing C&A for all networks in the pentagon, Bolling AFB and Andres AFB (NIPRNET and SIPRNET).

Army CERT Incident Handling, Vulnerability Assessments, Intrusion Detection, Advanced Tool Sets, and Special Development Projects including honeynets.

Developed information security policy and training for the USPS CISO.

Mr Bachman developed a security section that offers comprehensive security solutions to include vulnerability assessments, policy and procedures, Intrusion Detection Software (IDS) and firewall installations. He also provides training on all the aforementioned topics. Implemented the first security for AKO and did the first accreditation for their networks.

Program Manager and C2P Section Manager. He was responsible for supervising up to 20 personnel in the execution of all Army CERT operations. He developed and conducted computer network security training to enable network administrators to detect intruders and effectively respond to them. Also at TASC, he was responsible for conducting intrusion detection (IDS) procedures for the Army’s tactical networks, including developmental and operational. Mr. Bachman was the lead engineer in developing the implementation plan to install network intrusion detection systems at all Army posts. Trained three tactical network operations centers to successfully detect and respond to live attacks in tactical exercises, including FBCB2.As the lead computer security engineer, he was responsible for detecting incidents of unauthorized access to the Army’s computers and networks and for supporting development of all Army-directed C2Protect missions and exercises. Mr. Bachman ran the Army computer security help desk that included catching hackers. There he also specialized in intrusion detection monitoring.

Arlington, Virginia, Us

Mr. Bachman was responsible for conducting the Army automation-related counterespionage cases in the Army’s only computer forensics lab. He planned and coordinated investigation-involving penetrations of Army information systems, analyzed computer media, and assisted other investigative agencies within the U.S. government. He supervised 23 personnel responsible for neutralizing automated espionage and protecting national technologies from exploitation. Mr. Bachman has worked with Local Area Networks (LANs) utilizing Solaris, Windows NT, Windows95/98, BSD, Novell, and Linux. There he monitored and maintained a firewalls and servers.As an Aviation Operations Officer and CH-47D (Chinook) Helicopter Pilot for 10 years he was responsible for executing missions in a variety of countries under challenging conditions, always with successful results. Mr. Bachman supervised up to 70 soldiers and was responsible for more than $80 million in equipment. Executed a $3 Million operation budget for a separate organization overseas.

Bs, Computer Science

Ciso

Masters In Public Administration, Mpa

Education record

Education record

Master'S Degree, Public Administration

Program Management