BERTRAND D. SPANN
Waldorf,MD
Summary
Seasoned Cybersecurity Professional with 15+ years of experience supporting Department of Defense (DoD) and Intelligence Community (IC) mission-critical programs. Recognized expert in Software Assurance (SWAP), Risk Management Framework (RMF) implementation, Assessment & Authorization (A&A), and Continuous Monitoring. Proven track record of conducting comprehensive security control assessments, vulnerability analyses, configuration management, and compliance audits to secure complex government infrastructure. Successfully led initiatives securing Authority to Operate (ATO) approvals, executing rigorous POA&M remediation, and ensuring strict NIST SP 800-37 / 800-53 compliance across highly classified environments.
Overview
23
23
years of professional experience
1
1
Certification
Work History
Cyber Software Assurance Assessor
Lunarline / Motorola Solutions / Quantum Research International
Springfield, VA
09.2019 - 01.2026
- Direct Software Assurance (SWAP) and Volt processes, conducting complex NIIS assessments for domestic and foreign-owned software across enterprise environments.
- Perform end-to-end risk assessments, technical vulnerability analysis, and compliance scans to directly support Assessment & Authorization (A&A) workflows.
- Brief senior executive leadership and foreign threat analysis teams on overall security posture, foreign software risk vectors, and mitigation strategies.
- Maintain Configuration Management (CM) integrity for critical security software, hardware, and firmware, ensuring licensing compliance and prompt security patch deployment.
- Validate SWAP tool data accuracy and author authoritative Memorandums of Approval (MoA) identifying high-risk or foreign-owned software threats.
Information Systems Security Officer (ISSO)
Compusult Systems
Springfield, VA
08.2018 - 09.2019
- Managed continuous monitoring operations, tracking system vulnerabilities and developing actionable Plan of Action and Milestones (POA&M) remediation strategies.
- Safeguarded operational system security posture to ensure full compliance with evolving DoD cybersecurity mandates and NIST guidelines.
- Utilized XACTA to perform detailed security impact analyses for proposed system modifications and baseline configuration updates.
- Authored, reviewed, and finalized comprehensive RMF documentation packages in strict alignment with NIST SP 800-37 and NIST SP 800-53.
- Served as the primary ISSO for two major programs, successfully driving all security requirements to achieve full Authority to Operate (ATO).
Information Systems Security Officer (ISSO)
CACI
Springfield, VA
03.2013 - 08.2018
- Developed and executed robust POA&M remediation plans in direct collaboration with System Owners, Security Control Assessors (SCAs), and technical engineering teams.
- Monitored continuous remediation activities, delivering regular compliance status reports to stakeholders and program leadership.
- Partnered with Information System Security Managers (ISSMs) and Operations & Maintenance (O&M) teams to streamline privileged user account approval processes.
- Assisted in the assembly, validation, and maintenance of Information Assurance Compliance System (IACS) packages.
Personnel Security Specialist
Ward Solutions
Springfield, VA
01.2011 - 03.2013
- Supported DEERS/RAPIDS identity management infrastructure, processing Common Access Card (CAC) approvals and executing necessary software updates.
- Processed critical security clearance documentation, including DD-5200 packages, Visit Authorization Requests (VARs), and Visit Authorization Letters (VALs).
- Leveraged JPAS to coordinate security clearance processing, adjudications, and access updates with government security officials.
- Enforced strict compliance with personnel, physical, and administrative security policies across classified DoD programs.
ITSS DEERS Technician
Frontier Systems Inc.
Pentagon, Arlington, VA
11.2009 - 01.2011
- Managed day-to-day operations for the Defense Enrollment Eligibility Reporting System (DEERS) and associated HR IT software.
- Facilitated program integration, system coordination, and implementation of personnel IT systems supporting DoD-wide operations.
Personnel Security Supervisor
Triumph Technologies / Raytheon
Falls Church, VA
03.2007 - 11.2009
- Supervised personnel security clearance administration for civilian, military, and contractor personnel across multiple programs.
- Coordinated Sensitive Compartmented Information (SCI) clearance processing, waivers, and security level adjustments with federal security authorities.
- Managed SCI badge documentation workflows and maintained updated security records within JPAS.
ICT Site Technician
Force 3 – Pentagon Renovation Project
Washington, DC
05.2003 - 03.2007
- Supported high-security facility operations during the critical Pentagon reconstruction phase following 9/11.
- Managed access control systems, identity verification procedures, and security inspections for personnel entering and exiting secure sites.
Education
Information Technology, General Studies
Prince George's Community College
MDSkills
- Frameworks & Governance: Risk Management Framework (RMF), NIST SP 800-37, NIST SP 800-53, Assessment & Authorization (A&A), Continuous Monitoring, Configuration Management (CM)
- Security & Risk Operations: Software Assurance (SWAP), Security Control Assessment, POA&M Management, Foreign Software Risk Identification, Threat & Vulnerability Analysis, Security Impact Analysis
- Programs & Support: ISSO Support, Auditing & Compliance, Identity Management (DEERS/RAPIDS), Personnel & Physical Security Integration
- Compliance & Risk Tools: XACTA, HP Fortify SCA, Information Assurance Compliance System (IACS)
- Network & Perimeter Security: Fortinet, IDS/IPS
- Endpoint & Data Protection: McAfee, Symantec, Digital Guardian DLP
- Personnel Security Databases: JPAS, DEERS/RAPIDS
- Data Transfer Officer
- Database management
- Problem-solving
- Excellent communication
Certification
- CompTIA Security+
- XACTA Certified / Proficient
- Risk Management Framework (RMF) Specialist
Timeline
Cyber Software Assurance Assessor
Lunarline / Motorola Solutions / Quantum Research International
09.2019 - 01.2026
Information Systems Security Officer (ISSO)
Compusult Systems
08.2018 - 09.2019
Information Systems Security Officer (ISSO)
CACI
03.2013 - 08.2018
Personnel Security Specialist
Ward Solutions
01.2011 - 03.2013
ITSS DEERS Technician
Frontier Systems Inc.
11.2009 - 01.2011
Personnel Security Supervisor
Triumph Technologies / Raytheon
03.2007 - 11.2009
ICT Site Technician
Force 3 – Pentagon Renovation Project
05.2003 - 03.2007
Information Technology, General Studies
Prince George's Community College