Security leadership. Technical depth.
Information Systems Security Manager
Security clearanceTS/SCI FSP
Whitman, Requardt and Associates · Sep 2024 — Present
I connect the details inside a network with the decisions that protect it. My work brings together security engineering, risk management, and intelligence.
1,100+Users reached
100+Critical vulnerabilities
ATOWithout deficiencies
Experience across mission-driven organizations
The work I do
From network behavior to executive briefings, I work across the technical and organizational sides of security.
Build defensible security programs, translate requirements into controls, and prepare systems for authorization and assessment.
Understand how systems behave, validate weaknesses, and make remediation practical for the people who run them.
Connect network activity, threat context, and evidence into clear findings that support operational decisions.
Selected contributions
1,100+
Security awareness campaigns designed and executed through KnowBe4 at WRA.
Security leadership100+
Identified and helped remediate across client engagements with InFocus Consulting.
Penetration testingATO
Authorization achieved through end-to-end RMF activities across WRA network enclaves.
Assurance & authorizationIndependent projects & agentic development
Alongside my security career, I’m developing VidarFit and exploring how AI agents can support the full software lifecycle: research, design, implementation, testing, and release.
Featured project · Early access
Adaptive strength training, built around the athlete.
I’m building a training product that turns a person’s goals, equipment, recovery, and workout history into an adaptable plan.
Side project · Playable now
A 3D block-world math adventure for 3rd graders.
A browser game I built with AI coding agents. Kids practice third-grade math by battling mobs, mining ore, building farms, and trading with villagers across a story campaign.
NOT AN OFFICIAL MINECRAFT PRODUCT. NOT APPROVED BY OR ASSOCIATED WITH MOJANG OR MICROSOFT. BlockCraft Math is a free, fan-made game. The preview image shows textures from Pixel Perfection by XSSheep and Nova Wostra (via Mineclonia), CC BY-SA 4.0, adapted.
Side project · Playable now
A virtual-reality network operations center that teaches CompTIA Network+.
A WebXR training game I built with AI coding agents. Players answer scenario tickets at a NOC command console, then teleport to a lab bay to rack virtual gear, console into a simulated switch and router, and troubleshoot a broken network.
Not affiliated with, sponsored by or endorsed by CompTIA or Cisco. CompTIA and Network+ are trademarks of CompTIA, Inc.; Cisco and IOS are trademarks of Cisco Systems, Inc. Scenarios are original practice material, not exam questions.
How I work with agents
Use research, written requirements, and persistent project context to turn broad ideas into concrete work for AI coding agents.
Work with Codex and Claude Code on implementation, debugging, design, and review, refining the result through repeated feedback.
Connect automated tests, browser verification, version control, and Cloudflare deployment into a practical development workflow.
Snapshot: September 5, 2026. GitHub reports 1,099 commit contributions associated with my account from January 1 through September 5. VidarFit’s codebase contains 1,616 commits in its default-branch history, including work produced with agents and any other authors. These are different measures and are not added together.
Token usage: approximately 42.9 billion tokens recorded in available local Codex and Claude Code session logs from July 15 through September 5, 2026. This includes input, generated output, and cached-input processing. Most of the volume is cached input; it is not 42.9 billion tokens of newly generated text, a billing total, or a complete lifetime ledger.
The estimate deduplicates repeated Codex usage events and Claude message IDs. Local logs are incomplete across providers and machines, so this is an activity estimate with a defined scope.
Read the snapshot dataPublic repositories include research reporting, interface experiments, and practical applications.
Professional experience
Security leadership, consulting, engineering, and military service. Explore each role for responsibilities and technical detail.
Current roleWhitman, Requardt and Associates
Sep 2024 — Present
Leading information assurance and network security across multiple enclaves, connecting technical controls with authorization, assessment readiness, and incident response.
Lead information assurance and network security programs for multiple information systems, driving end-to-end RMF activities across multilevel network enclaves.
Implement NIST 800-171 controls and CMMC requirements, coordinating with managed security and service providers to develop the enclave SSP and supporting artifacts.
Use Nessus and SCAP benchmarks to assess enterprise configurations and system architectures, identify security gaps, and drive remediation across federal and state contracts.
Apply DISA STIGs and CIS Benchmarks to network devices and servers. Develop custom hardening strategies for systems that lack formal guidance.
Integrate Arctic Wolf, Splunk, Windows Defender, and Palo Alto Cortex to centralize network analysis and support incident detection across multiple enclaves.
Author the corporate Incident Response Plan and coordinate cross-functional response, external forensics, legal engagement, real-time timelines, and executive briefings.
Design and execute KnowBe4 campaigns for 1,100+ users and all cleared personnel to support secure enterprise network use.
Analyze and map enterprise enclaves, traffic flows, and misconfigurations to support red-team and assessment planning.
InFocus Consulting
Feb 2023 — Feb 2025
Testing systems, networks, and web applications to turn exploitable weaknesses into clear, actionable remediation work.
Performed authorized penetration testing and exploitation of systems, target networks, and web applications using advanced testing methodologies.
Used Burp Suite and Qualys to discover, validate, and document network and application vulnerabilities.
Developed exploitation-focused test plans based on threat intelligence and risks to client infrastructure.
Produced comprehensive reports through Dradis and PlexTrac, and worked with developers and system administrators to resolve findings.
Maintained current knowledge of vulnerability advisories, incidents, exploitation techniques, and assessment best practices.
Lockheed Martin
Feb 2021 — Apr 2024
Building and hardening infrastructure, automating configuration, and connecting vulnerability intelligence with global remediation.
Configured and deployed Palo Alto firewalls, applying DISA STIGs and knowledge of ports, protocols, and OSI-layer behavior to harden networks.
Built and managed administrative virtual machines, including Identity Management and ELK stack instances, to improve visibility and system performance.
Developed Ansible playbooks for device configuration and network and systems administration, supporting consistent compliance across enclaves.
Supported incident response and forensic investigations with Arctic Wolf, including timeline reconstruction and technical findings for stakeholders and legal teams.
Validated HackerOne submissions, coordinated global remediation, and tracked findings in Jira.
Used Recorded Future and open-source intelligence to assess cyber threats and produce actionable reports for senior leadership.
Analyzed firewall and ELK telemetry to identify anomalous behavior, support metadata-driven analysis, and inform remediation and hardening.
Booz Allen Hamilton
Mar 2019 — Feb 2021
Translating network, communications, and blockchain analysis into intelligence for DoD and law enforcement stakeholders.
Conducted cyber intelligence and digital network exploitation research, including blockchain transaction investigations, to identify risks and target communications.
Profiled adversary infrastructure using open-source and classified sources to support intelligence requirements and operations planning.
Delivered actionable intelligence and briefings for strategic planning, target development, and cybercrime prevention.
Analyzed metadata, researched targets, and contributed to global network analysis and mapping to maintain target continuity.
Current roleU.S. Army Special Operations Command & Tennessee Air National Guard
Aug 2013 — Present
A foundation in mission support, signals intelligence, and technical problem-solving, spanning network analysis and an early career in aircraft avionics.
Provided 24/7 signals intelligence and cyber intelligence support, including analysis and mapping of adversary digital communications and network infrastructure.
Supported red-team efforts and Computer Network Exploitation operations to identify vulnerabilities and enhance mission effectiveness.
Analyzed SIGINT and cybersecurity data across the OSI stack and delivered actionable intelligence products and high-interest briefings.
Researched target technologies, digital communications, and network topology to support access and exploitation analysis.
Analyzed collection and open-source data to profile target activity, maintain continuity, and develop additional cyberspace information.
Performed troubleshooting, preventive maintenance, and calibration of military aircraft avionics in an early-career technical role.
Tools & technologies
A practical toolkit spanning assessment, engineering, monitoring, intelligence, and reporting.
20 tools
Enterprise vulnerability analysis and remediation prioritization.
AssessWeb application testing, vulnerability validation, and exploitation.
Scanning and assessment of network and application security.
AssessSubmission validation and coordinated vulnerability remediation.
MonitorCentralized telemetry and security monitoring across enclaves.
Threat monitoring, incident response, and forensic coordination.
MonitorThreat monitoring and incident detection across enterprise environments.
Endpoint protection within enterprise detection and response workflows.
MonitorLog infrastructure, network visibility, and telemetry analysis.
Threat intelligence research and reporting for leadership decisions.
EngineerAutomated configuration, administration, and compliance consistency.
EngineerNetwork infrastructure deployment, hardening, and traffic analysis.
Configuration assessment against defined security benchmarks.
Structured assessment findings, impact, and remediation reporting.
Clear vulnerability reports and actionable remediation recommendations.
DocumentTracking security findings and coordinated remediation work.
Security awareness campaigns across a 1,100+ user organization.
GRCGovernance, risk, and compliance tooling for control and evidence management.
GRCGRC tooling supporting NIST 800-171 and CMMC compliance workflows.
Enterprise mission assurance tooling for RMF documentation and authorization workflows.
Tools are shown in the context of my experience. Select a tool name to visit its official website.
Education & credentials
Industry certifications, specialized military training, and continuing study in cybersecurity and information assurance.
CompTIA · 2024
Cybersecurity certification
About this certification
CompTIA · 2025
IT support certification
About this certification
In progressBachelor’s degree
Western Governors University
Specialized training
Formal training from intelligence fundamentals and cyber analysis to electronics and avionics.
Department of the Navy
Community College of the Air Force
Community College of the Air Force
Community College of the Air Force
Community College of the Air Force
Get in touch
For professional opportunities and conversations about cybersecurity, engineering, and intelligence.
⌖ Draper, Utah