Benjamin Dorman
Health‑Insurance Professional • Governance Expert
📧 bdorman@vaultmail.net | 📍 Billings, MT, USA | LinkedIn
Professional Summary
Seasoned health‑insurance specialist with 12 years of experience leading cross‑functional regression‑testing programs for claims‑processing software. Proven track‑record of delivering compliant, high‑quality releases that satisfy rigorous SOC 2 audit requirements.
Work History
Project Manager – Imagine 360
2013 – Present | Billings, MT
Achievements
- Led a cross‑department team to execute yearly regression testing for our claims processing platform. This insured that the business stayed up-to-date on the latest software so that we can continue to get support from our vendor
- Ensured 100 % SOC 2 compliance – zero critical findings in all audit cycles.
- Implemented the NIST Cybersecurity Framework for SSDF (Secure Software Development Framework) on API projects.
- Mentored staff.
Certifications
CompTIA SecAI+ (in progress)
Skills & Technologies
Regression Testing Java Python SQL AWS (EC2, S3, RDS) NIST Cybersecurity Framework SOC 2 Compliance Wazuh SIEM Linux Network Security Basics
Homelab Projects
In my spare time I maintain a small‑scale homelab that lets me experiment with networking, and security monitoring – all on low‑power hardware.
-
Pi‑Hole – Network‑wide ad‑blocking DNS server running on a Raspberry Pi.
I use it to filter unwanted traffic for all devices on my home network.
GitHub – Pi‑Hole -
Minecraft Server on Raspberry Pi – A fully‑featured Java Edition server hosted on a Pi 5. I manage backups, mods, and performance tuning via systemd
-
Wazuh SIEM – Deployed Wazuh (the open‑source security monitoring platform)
on a dedicated VM to collect logs, run file‑integrity monitoring, and generate alerts.
This gives me hands‑on experience with SOC‑2 and NIST type log‑retention and incident‑response
processes.
Wazuh Official Site
YouTube Channel
I produce practical videos that help people work smarter with large language models (LLMs). This includes GRC for LLM's. Example videos are:
-
Top 10 WASAP for LLMs – I review the top 10 vulnerabilities for LLM's and how to prevent them.
Watch on YouTube -
Prompt Engineering for SOC Analyst – beginner‑friendly guide on crafting effective prompts.
Watch on YouTube -
The Golden Rule For Compliance – Review the most important thing for staying compliant during audits
Watch on YouTube