AeroLeads people directory · profile

Robert Conner Email & Phone Number

Chief Application Security Architect responsible for maturing & restructuring AppSec processes into a formal program. at iq-Cyber, Inc.

Location: Washington DC-Baltimore Area, United States, United States 7 work roles 1 school

LinkedIn matched

✓ Verified May 2026 3 data sources Profile completeness 86%

Current company

iq-Cyber, Inc.

Role

Chief Application Security Architect responsible for maturing & restructuring AppSec processes into a formal program.

Location

Washington DC-Baltimore Area, United States, United States

Who is Robert Conner? Overview

A concise factual answer block for searchers comparing this professional profile.

Quick answer

Robert Conner is listed as Chief Application Security Architect responsible for maturing & restructuring AppSec processes into a formal program. at iq-Cyber, Inc., based in Washington DC-Baltimore Area, United States, United States. AeroLeads shows a matched LinkedIn profile for Robert Conner.

Robert Conner previously worked as Chief Application Security Architect at Iq-Cyber, Inc. and Chief Application Security (AppSec) Architect at Syneqx, Inc. & Tritech, Inc.. Robert Conner holds Master'S Degree, Cybersecurity & Digital Forensics from University Of Maryland, Umuc.

Company email context

Email format at iq-Cyber, Inc.

This section adds company-level context without repeating Robert Conner's masked contact details.

iq-Cyber, Inc.

Review company-level records connected to Robert Conner before choosing the right outreach path.

View email format View company profile Management contacts

Profile bio

About Robert Conner

Chief Application Security Architect charged with maturing & restructuring Application Security (AppSec) processes into a formal program. Augmented previous AppSec process that was based exclusively on automated security scans. Created new AppSec practice areas that included: Threat Modeling, Risk-Based Security Test Plan, Security Requirements (i.e. OWASP ASVS Controls Selection), Security Metrics Development. Inserted these new practice areas early in the SDLC. Created the following artifacts to support Application Security Verification Standard (ASVS) Level 1 for Internet facing applications: Threat Assessment, Software Attack Surface, Data Flow Diagram, Potential Application Attacker Profile (derived from Akamai Attack Pattern Logs), ASVS Playbook, ASVS Scorecard, and ASVS Control Categories. Developed control gates for using Webinpsect, AppScan, & Burp in code review process.

Current workplace

Robert Conner's current company

Company context helps verify the profile and gives searchers a useful next step.

Iq-Cyber, Inc.

Chief Application Security Architect responsible for maturing & restructuring AppSec processes into a formal program.

278 Conrad Dr, Clarksville,Tennessee 37042,United States

Website

iq-cyber.org

AeroLeads page

Company profile

View company profile Email format

7 roles

Robert Conner work experience

A career timeline built from the work history available for this profile.

Chief Application Security Architect

Current

Iq-Cyber, Inc.

As Senior Subject Matter Expert (SME) reproduced attack payloads using Burp Suite to demonstrate code vulnerabilities to development team. Worked with lead developers to triage and remediate critical & high issues.
Instrumental in reducing # of High category vulnerabilities discovered across all application domains by 60%. Metrics captured from security reports provides evidence of reduction: Dec 18, 2017 reported (32 Highs).
Developed a monthly actionable Enterprise Security Finding Report that summarized AppSec vulnerabilities to senior IRS executives. This report captured: actions needed to remediate AppSec flaws that keep reoccurring.
Led the effort with IRS senior management and executives to mature the AppSec process using OWASP’ Software Application Maturity Model (SAMM). This methodology will create a security culture whereby business units can.
Primary author of SOP guide for how dynamic application security scans are to be conducted across the IRS apps.
Future plans include incorporating Burp Suite to totally address all the requirements documented in NIST SP 800-53 (Rev. 4) SA-11 and to further verify the security posture of customer’s web apps across 19 OWASP.

Dec 2016 - Present

Chief Application Security (Appsec) Architect

Syneqx, Inc. & Tritech, Inc.

TriTech (Chief Application Security Architect) 1/2016 - 10/2016Chief Application Security Architect charged with maturing & restructuring AppSec process into a formal program. Improved previous AppSec process that.
Developed control gates (i.e. Threat Analysis, S/W Attack Surface Analysis) to formalize manual code review process.
Created new SAMM based AppSec practice areas (e.g. Metrics, Threat Modeling and Design Review: Risk-Based Security Test Plan).
Developed customized attack scripts to Pentest web applications using Burp Suite & OWASP Zap Attack Proxy; these scripts verified ASVS control requirements (which is the industry standard used to validate the security.
Used PenTest results to develop Risk Based Security Test Plan (i.e.ASVS playbook) so other team testers could reproduce and validate results captured from PenTest efforts.
Developed Risk Heat Map using attack patterns captured from Akamai (WAF) logs

Jan 2016 - Sep 2016

Senior Cyber Risk Analyst

Syneqx, Inc. (Consulting To Ehr Client -Confidential)

EHR Clients (Confidential) - Cybersecurity Analyst 5/2010 – 10/2011 and 5/2013 - present
Assisting several EHR vendors to get products certified under the Medicare and Medicaid EHR “Meaningful Use” Stage 1 and Stage 2 Program. Assisted EHR vendor while supporting “primary care provider” in the writing.
Prepared cyber risk assessment and security gap analysis of internet facing applications; developed threat modeling rule engine to help developers “detect” potential vulnerabilities in their code; this activity also.
Developed security profiles and trust boundaries to harden and secure application code from threats and vulnerabilities; Enhanced security of EHR vendor product suite by decomposing EHR application and developing.
Conducted vulnerability assessments, threat modeling, and remediated high-risk vulnerabilities for HIPAA accreditation of EHR vendor products. Prepared remediation actionable reports and countermeasures to reduce.

May 2010 - Jan 2016

Senior Analyst

Syneqx, Inc (Contractor To Dept. Of Agriculture)

Provided Subject Matter Expertise for Continuity of Operations Plan (COOP) for Dept. of Agriculture. Conduct a comprehensive Gap Analysis and Business Impact Analysis (BIA) of the existing COOP Plan to identify areas.
Analyzed and mapped business processes and data flows, gap analysis, system conversions, customization and user acceptance testing to verify proper functioning of key components of various applications.
Develop kickoff presentations, storyboards, modeled and documented (“As-Is”) workflow and (“To-Be”) business processes.
Develop UML diagrams to document Business process and workflows using MS Visio.
Provided training and technical guidance to less senior staff, where appropriate, and serving as point-of-contact for problem resolution.

Jun 2005 - Sep 2014

Cybersecurity Compliance Analyst

Syneqx, Inc. (Consulting To Wmata Client)

In preparation for PCI audit Created policy narrative, endpoint architecture & data flow diagrams of Cardholder Data Environment (CDE).
Developed Concept-of-Operation plan to satisfy auditor’s request to expand the number of detection and prevention controls (i.e. NIST 800-53a control mechanisms) for protecting SCADA devices and CDE.
Defined and established system hardening baseline during the acquisition phase of planned systems. Communicated governance and established the policies used to generate custom rules for system scans, application scans.

Oct 2011 - Apr 2013

Senior Business Process Analyst

Syneqx, Inc

Baltimore County Government - Business Analyst/Project Manager 5/2008– 4/2010
Led agile development effort to streamline business processes and replace disparate Microsoft Access databases with a centralized Oracle database view of information based on the property location within the Department.
Built workflow of existing DEPRM processes using (“As-Is”) and (“To-Be”) models. Identified all business areas and data inputs/outputs required to implement the business process.
Led and performed JAD sessions to develop consensus on requirements between disparate business units and internal and external stakeholders impacted by process redesign.
Developed functional and system requirements documents, screen mock-ups, use cases, requirements traceability matrix, data conversion and interface control documents. Documented, then consolidated and streamlined.
Developed project timelines and projected costs of labor and system resources needed to replace existing DEPRM databases with an integrated Oracle based system.

May 2008 - Apr 2010

Technical Program Manager/Principal Architect

Synex, Inc.,(Clients: Ibm, Air Force, Us Army)

Improved case tracking by developing an enterprise web application that automated access to case records & client tracking statistics. Developed JavaScript’s for the Lotus Domino Workflow Engine (3.x, 4.x) to retrieve.
Interacted with stakeholders to review requirement documents, develop system design documents, and review GUI mock-ups for customization of application screens.
Migrated web applications from WebSphere 5.x to 6.x. Installed Webspere Port 6.x, Websphere Application Server. Developed workflow scripts and setup replication schedules between multiple Domino servers. Performed.
Redesigned Business Processes to streamline management of Air Force Budget financial resources, as well as enhance decision-making and increase the accuracy and flow of information in response to executive and.
Designed segmented networks to protect sensitive internal Windows database servers for Military District of Washington. Used “nmap”and “eEye’s Retina” to conduct Vulnerability Assessment and Penetration testing on.
Constructed pilot system and developed implementation plan for migrating 50,000+ users of U.S. courts from Novell e-mail and assorted e-mail systems to Lotus Domino and Quickplace.

Mar 2000 - Jun 2005

1 education record

Robert Conner education

University Of Maryland, Umuc

Cybersecurity & Digital Forensics

FAQ

Frequently asked questions about Robert Conner

Quick answers generated from the profile data available on this page.

What company does Robert Conner work for?

Robert Conner works for iq-Cyber, Inc..

What is Robert Conner's role at iq-Cyber, Inc.?

Robert Conner is listed as Chief Application Security Architect responsible for maturing & restructuring AppSec processes into a formal program. at iq-Cyber, Inc..

Where is Robert Conner based?

Robert Conner is based in Washington DC-Baltimore Area, United States, United States while working with iq-Cyber, Inc..

What companies has Robert Conner worked for?

Robert Conner has worked for Iq-Cyber, Inc., Syneqx, Inc. & Tritech, Inc., Syneqx, Inc. (Consulting To Ehr Client -Confidential), Syneqx, Inc (Contractor To Dept. Of Agriculture), and Syneqx, Inc. (Consulting To Wmata Client).

How can I contact Robert Conner?

You can use AeroLeads to view verified contact signals for Robert Conner at iq-Cyber, Inc., including work email, phone, and LinkedIn data when available.

What schools did Robert Conner attend?

Robert Conner holds Master'S Degree, Cybersecurity & Digital Forensics from University Of Maryland, Umuc.

Security Check