Open To Work
Gary Rand
Dayton,OH
Summary
Strategic security leader with over 25 years in industrial security program management and cybersecurity. Expertise in implementing security policies under NISPOM, ensuring compliance with regulations such as 32 CFR Part 117 and DODM 5200.01. Proficient in managing facility security, personnel security, and classified materials across government and defense sectors. Achievements include enhancing cybersecurity for a $700 billion portfolio, resulting in significant improvements in incident response and risk management.
Overview
25
25
years of professional experience
5
5
Certificates
6
6
Major Military Awards/Medals
Work History
Information System Security Officer (ISSO)
Leidos
Dayton, Ohio
07.2025 - Current
- Formulated system security plans (SSP) to achieve accreditation requirements.
Conducted reviews of security test procedures (STP) to strengthen security postures.
Established and tracked plan of action and milestones (POA&M) for timely remediation. - Implemented ongoing vulnerability assessments via ACAS and Nessus to mitigate threats.Utilized Splunk for comprehensive log analysis to support incident response. Verified compliance with STIGs and NIST SP 800-53 controls through thorough monitoring.
- Implemented ongoing vulnerability assessments via ACAS and Nessus to mitigate threats.
Utilized Splunk for comprehensive log analysis to support incident response. Verified compliance with STIGs and NIST SP 800-53 controls through thorough monitoring. - Investigated security incidents to identify root causes and recommend mitigation strategies.
Provided precise guidance for effective incident mitigation measures. Documented security breaches comprehensively for continuous improvement. - Executed regular vulnerability scans using Nessus to ensure compliance with security technical implementation guides.
- Constructed and managed detailed body of evidence (BOE) featuring system security plans (SSP) and network diagrams.
- Incident response SME engaged in investigation, mitigation, and documentation of security incidents and breaches.Give
CYBER RESILIENCY OFFICE FOR WEAPONS SYSTEMS
Department Of The Air Force, Material Command
Wright-Patterson AFB, OH
06.2023 - 07.2025
- Led strategic direction for cybersecurity and security compliance across a $700 billion portfolio of aircraft systems, ensuring compliance with NISPOM, DoDM 5200.01, and other regulations.
- Managed security protocols for classified systems, including overseeing clearance processes, and implementing risk management frameworks for mission-critical assets.
- Successfully coordinated with DoD representatives and external agencies (e.g., DCSA) on security assessments, inspections, and compliance reviews.
- Led the development and execution of security plans, ensuring classified materials were protected, destroyed, or transferred in accordance with government regulations.
- Facilitated 12 ATOs and 9 Supply Chain Risk Management assessments, significantly enhancing the cybersecurity posture and compliance with NISPOM guidelines.
- Safeguarded classified program information and critical functionality to maintain system security throughout its lifecycle.
- Delivered concise updates to PEO executive staff regarding CFT progress, achievements, and mission support initiatives.
- Responsible for the evaluation and development of DoD acquisition documents, including RFPs, SOWs, CDRLs, Source Selection Criteria, and Standards, and Proposal Evaluation.
SENIOR, SECURITY MANAGER
HX5
Dayton, OH
09.2022 - 05.2023
- Oversaw facility security, personnel security, and classified materials management, ensuring compliance with NISPOM Rule and DoD regulations to safeguard sensitive information.
- Developed and implemented security policies and procedures for handling classified and proprietary materials, aligning with federal security standards to enhance operational integrity.
- Coordinated with security agencies and senior leadership to ensure compliance with NISPOM, ICDs, and security clearance processes, facilitating secure operations and risk mitigation.
- Directed the implementation of an insider threat program, and designed awareness training for personnel on security best practices.
- Functioned as a Subject Matter Expert for the Air Force Lifecycle Management Center, Weapons & Mobility Directorate, Program Nuclear Command, Control, and Communication (NC3).
- Reviewed and approved DD 254s for the Air Force Lifecycle Management Center, Weapons & Mobility Directorate, ensuring compliance with regulations.
SUPERINTENDENT, SECURITY FORCES OPERATIONS
United States Air Force, USAF
Wright Patterson AFB, OH
02.2021 - 09.2022
- Managed security for 31,000 personnel and $14.9 billion in cybersecurity assets, including the development of disaster preparedness, emergency response strategies, and counterterrorism measures.
- Oversaw security protocols, clearance management, and risk mitigation strategies for classified military programs and assets, enhancing operational integrity.
- Executed security processes for handling classified materials, ensuring compliance with security agreements and DD Form 254 lifecycle management, protecting sensitive information.
- Successfully reduced spending by $221K in special project funds for the Air Force in the 2021-2022 fiscal year by implementing efficient material sourcing techniques and closely managing labor hours.
Project Manager Electronic Security Systems
United States Air Force, USAF
Abu Dhabi, UAE
10.2018 - 05.2019
- Managed the installation, testing, and risk management of $11M electronic security systems for defense operations, ensuring compliance with DoD security regulations, and NISPOM standards.
- Conducted vulnerability assessments for counter-small unmanned aerial vehicle intrusion detection systems, enhancing contingency technology valued at $45M in network and infrastructure.
- Conducted vulnerability assessments, delivering recommendations that strengthened security of classified systems and facilities.
- Resolved 76 system errors, resulting in the elimination of 60 security deficiencies across 147 operation system evaluations, and generating a $1.1B contribution towards advancing future technology in electronic warfare.
Education
Bachelor of Arts - Psychology
University of Maryland Global Campus
Hyattsville, MDAssociate of Arts - Liberal Arts
University of Maryland Global Campus
Hyattsville, MDAssociate of Science - Criminal Justice
Community College of The Air Force
Montgomery, ALSkills
- Information protection strategies
- Cybersecurity strategy implementation
- Vulnerability assessment
- Incident response
- Compliance evaluation
- Cybersecurity strategy
- Information protection
- Insider threat mitigation
- System security
- Network security management
- Information security governance
- Nuclear command control
- Program management
- Strategic planning
- System security management
- Security classification guides
- Top secret security clearance
Timeline
Information System Security Officer (ISSO)
Leidos
07.2025 - Current
CYBER RESILIENCY OFFICE FOR WEAPONS SYSTEMS
Department Of The Air Force, Material Command
06.2023 - 07.2025
SENIOR, SECURITY MANAGER
HX5
09.2022 - 05.2023
SUPERINTENDENT, SECURITY FORCES OPERATIONS
United States Air Force, USAF
02.2021 - 09.2022
Project Manager Electronic Security Systems
United States Air Force, USAF
10.2018 - 05.2019
Bachelor of Arts - Psychology
University of Maryland Global Campus
Associate of Arts - Liberal Arts
University of Maryland Global Campus
Associate of Science - Criminal Justice
Community College of The Air Force
Certification
- Certified Facility Security Officer (FSO) - Defense Counterintelligence and Security Agency (DCSA)
- CompTIA Security+
- Six Sigma Green Belt
- Physical Security Certification (SPeD)
- Security Fundamentals Professional Certification (SPeD)
Accomplishments
- Meritorious Service Medal
- Air and Space Commendation Medal (4)
- Air and Space Achievement Medal (3)
- Global War on Terrorism Service Medal
- Afghanistan Campaign Medal
- Iraqi Campaign Medal
Additional Experience and Skills
- COMSEC Custodian: Expertise in handling classified and unclassified COMSEC, ensuring compliance with NSA regulations.
- Clearance Management: Experience with DISS, NBIS, and personnel security, including conducting clearance briefings and ensuring accurate security records.
- DD Form 254 Management: Extensive experience drafting, reviewing, and managing DD Form 254s for classified contracts.
- Incident Reporting & Metrics Tracking: Drafting incident reports, monitoring security trends, and maintaining monthly security metrics.