Craig Randazzo
@craigrandazzo
I assess security controls, analyze risk, and strengthen compliance across regulated systems.
United StatesWhat I'm looking for
At Brookhaven National Laboratory, I assess, validate, and monitor security controls against Department of Energy, governmental, and internal standards. I analyze dashboard metrics for CISO and CIO risk reports, develop security documentation, and work with system owners and DOE cybersecurity teams to address compliance gaps.
Previously, at Whitetail Consulting, I supported vulnerability scanning, remediation prioritization, security reporting, and threat intelligence monitoring. I bring hands-on experience with NIST 800-53, ISO 27001, CIS, Tenable Nessus, ServiceNow GRC, and Windows and Linux environments.
Experience
Work history, roles, and key accomplishments
Conducts assessment, validation, and monitoring of security and compliance controls to ensure systems meet DOE and internal standards. Analyzes risks, evaluates control effectiveness, documents findings, and collaborates with stakeholders to remediate gaps.
Security Vulnerability Analyst
Whitetail Consulting LLC
Jan 2017 - Jan 2025 (8 years)
Supported information security efforts by assisting in identification, analysis, and tracking of security vulnerabilities. Monitored systems, performed routine security scans, and contributed to protection of digital assets.
Provided administrative support to technical teams, managed documentation workflows, and coordinated cross-departmental collaboration. Ensured adherence to company policies and data privacy standards.
Education
Degrees, certifications, and relevant coursework
EC-Council
Certified Ethical Hacker (C|EH), Cybersecurity
Currently pursuing the Certified Ethical Hacker (C|EH) certification.
Columbia University School of Engineering
Technical Certification, Cybersecurity
Cybersecurity Technical Certification program.
Suffolk County Community College
A.A.S., Business Administration and Management
Associate of Applied Science in Business Administration and Management.
CompTIA
Security+, Cybersecurity
CompTIA Security+ certification.
ISC2
Certified in Cybersecurity (CC), Cybersecurity
ISC2 Certified in Cybersecurity (CC) certification.
Availability
Location
United StatesAuthorized to work in
Salary expectations
Social media
Skills
Interested in hiring Craig?
You can contact Craig and 90k+ other talented remote workers on Himalayas.
Message CraigGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
