ccChance Cummings
Resume
Open to SOC, security & senior IT roles · Nashville, TN

Chance
Cummings

I keep a hospital's clinical endpoints running, and I build tools that help protect small businesses.

IT Field Service Technician on the Refresh Team at Vanderbilt University Medical Center (CTG contract). CompTIA A+ and Network+, Security+ in progress. Next step: cyber defense.

Download resume Email me See my work
TargetingSOC AnalystSecurity OperationsEndpoint / Desktop Engineering
100+
Clinical workstations & WOW carts deployed
7+
Hospital unit go-lives supported
32+
iOS devices provisioned via Intune & ABM
3
Hospital sites covered in the field
12+
Security tools & platforms shipped
What I bring

Reliable in a live hospital. Curious about how it breaks.

I came to IT from trucking, landscaping, and farm work. That background shows up as showing up: finishing the job, talking to the people on the floor, and writing down what I learned.

01

Calm on clinical floors

Go-lives, backfills, and swaps on units with active patients, including a pediatric heart unit and an epilepsy monitoring reading room. I plan around clinical work, not the other way around.

02

I find what the ticket didn't say

Located carts no ticket described, a laptop offline since 2024, and closed a multi-site visit six other technicians hadn't finished, by walking floors and asking the people who use the equipment.

03

Security-minded, and I build things

Phishing trainers, header analyzers, OSINT and DFIR utilities, a PowerShell assessment kit, and an Active Directory home lab. Hands-on practice behind the certifications.

01 · Experience

Where I've worked

Healthcare enterprise IT, my own security consultancy, small-business IT, and commercial logistics.

Mar 2026 – Present
Nashville · Clarksville · Tullahoma, TN
Current role

IT Field Service Technician, Refresh Team

Vanderbilt University Medical Center
CTG contract · Healthcare enterprise IT · HIPAA environment · Multi-site
Neuro Step Down ×2EMU Reading Room4–5 backfill go-lives32-port PXE imagingIntune + Apple Business Manager
Highlight

Restored a unit's only cardiac data-acquisition path

Remotely installed and configured Philips Holter monitoring software on a replacement acquisition workstation, the only computer in the unit certified to run it. Coordinated around active patient monitoring the whole way.

Result: zero disruption to patient monitoring
Ownership

Closed a multi-site visit six technicians hadn't

Desktop swaps, rename scripting, shared drive mapping, forced updates, and full Pegasus CI asset records, end to end and unsupervised.

Troubleshooting

Tracked down hardware no ticket described

Found two failing WOW cart units by interviewing nurses, pulled the IP over Bomgar, and confirmed location against the Cisco Prime access-point map before swapping.

Imaging & deployment
  • Provisioned and deployed 100+ clinical workstations and WOW carts across multiple floors, from imaging to floor-ready.
  • Ran 32-port KVM/PXE imaging (WinPE + WIM, manual OS and OU selection, no SCCM) and performed a live network switch swap and port remap during a full-day refresh.
  • Wiped, reimaged, and redeployed Windows machines and WOW carts across Nashville, Clarksville, and Tullahoma.
MDM & mobile
  • Provisioned 32+ iOS devices via Intune and Apple Business Manager, including Radiology-specific configurations.
  • Built and pushed floor-specific Intune configuration profiles matched to each unit's clinical workflow.
  • Built cellular charge-nurse iPhone profiles with distinct APN configuration and policy, separate from Wi-Fi-only devices.
Clinical go-lives
  • Supported full go-lives for two Neuro Step Down units: device deployment, network validation, and on-site support through cutover.
  • Worked with a specialized IT group to install and commission epilepsy monitoring equipment in an EMU reading room, then supported its go-live.
  • Executed 4–5 backfill moves with go-lives, adapting to last-minute scope changes; swapped a digital status board on a pediatric heart unit during active use.
Documentation & security
  • Authored SOP-ITS-001, an iOS MDM provisioning runbook; became the team's go-to for MDM workflows after a senior technician left.
  • Used PowerShell to locate IPs on restricted machines and documented how GPO and Intune compliance correctly blocked privilege escalation.
  • Keeps Pegasus CI and the team tracker current after every swap; troubleshoots VMware Horizon VDI sessions; follows HIPAA/PHI device handling throughout.
2024 – Present
Middle Tennessee

Founder & Security Consultant

Dark Fire Security
Cybersecurity consulting for small businesses, tradespeople, and farms
  • Built the brand, website, and service offering end to end; packaged a tiered Business Security Checkup using a trades-inspection analogy non-technical owners already trust.
  • Shipped 12+ security tools, including PhishGuard (phishing simulation trainer) and the Wave 1 Assessment Toolkit, five USB-portable PowerShell WPF tools for on-site assessments.
  • Published the Zero-Trust Proximity Protocol, an RFC-style spec and whitepaper on LAN discovery exposure, with an interactive demo.
2024 – Present
Ashland City, TN

IT Technician (Contract)

A1 Pawn Shop
Break-fix · Retail IT · Data destruction
  • Diagnosed and repaired laptops and desktops with boot failures, OS corruption, and hardware faults.
  • Performed secure data destruction with ShredOS, including verification certificates and chain-of-custody records.
  • Built a custom analytics dashboard for inventory and sales data.
2023 – Present
Ashland City, TN

Owner / Operator

Double C Solutions, LLC
Small-business IT · Web development
  • Builds and deploys websites for local small businesses through a Claude → GitHub → Vercel pipeline.
  • Handles scheduling, invoicing, client communication, and delivery alongside full-time work.
Jul 2021 – 2023
Nashville, TN

Feeder Operator / CDL Class A Driver

UPS
  • Operated commercial vehicles on tight hub deadlines with a strong safety record, coordinating closely with dispatch.

Before UPS: ran my own landscaping business and worked on farms.

02 · Projects

Security tools I've built and shipped

Live, clickable, and built for real defensive use under the Dark Fire Security brand.

Security awarenessLive

PhishGuard

A phishing simulation trainer with a hunt-the-tells mechanic. 12+ scenarios across email, SMS, QR quishing, calendar invites, and vishing, with Gauntlet mode, cross-session mastery tracking, and per-element feedback.

Vanilla JSNo dependenciesVercel
Play the full trainer
Try it: find the 4 tells0/4
FromIT Support <help@>
Subject Password expires today
Your account will be . Verify your credentials now to keep access.

Tap anything that looks off.

Web securityLive

HEADHUNTER

HTTP security header analyzer. Runs 15 checks against any public URL, scores it, and exports a findings report. All analysis runs in the browser.

headhunter-beige.vercel.app
OSINTLive

WHOISVAULT

Domain, IP, ASN, and geolocation intelligence. Pulls RDAP registration data and network ranges across three live APIs, with JSON/TXT export.

who-is-vault.vercel.app
Pentest toolkitLive

DARKFIRE PENTEST

Mobile-first, auth-gated toolkit with recon, web assessment, and forensic modules, session tracking, and exportable reports.

dark-fire-field.base44.app
DFIRLive

DarkChef

CyberChef-style encoding, decoding, and hashing workbench for SOC and incident-response data handling.

Open DarkChef
ConsultingLive

Small Business Risk Report

Client intake and risk scoring that produces a plain-English security posture report for non-technical owners, with prioritized recommendations.

Risk scoringCloud Run
Open the tool
Brand siteLive

darkfiresecurity.com

The consultancy site: service tiers, tool pages, contact form, and free small-business security eBook. Designed and maintained myself.

HTML/CSS/JSFormspreeGitHub Pages
darkfiresecurity.com

More from the toolkit

GitHub →

Wave 1 Assessment Toolkit PowerShell

Five WPF tools on a USB stick: password audit, Wi-Fi check, USB history, open ports, email header analysis.

GitHub

FIELDCRAFT SOC Platform

53 spaced-repetition cards, 14 triage scenarios, and MITRE ATT&CK-mapped labs.

View

ExifTool GUI Pro

EXIF read, write, and strip with GPS mapping, plus XMP/IPTC/COM segment removal.

View

Image Steganography Tool

LSB embed and extract with optional AES-256-GCM via WebCrypto. No libraries.

View

SUBFIND

Passive DNS subdomain enumeration for attack-surface mapping.

View

Secure File Shredder Python

Multi-pass overwrite (DoD 3-pass to Gutmann), fsync per pass, filename obscuring.

GitHub

QR Code Toolkit

Generate and scan Text/URL, Wi-Fi, and vCard codes. Single file, zero dependencies.

View

PyForge AI Sandbox

Cloud-hosted Python environment for scripting labs and automation prototypes.

Open

Zero-Trust Proximity Protocol Research

RFC-style spec, whitepaper, and demo on LAN discovery exposure.

Read
03 · Skills

What I use, and where I use it

Split honestly: tools I use on the job every week, and tools I've built with or run in my home lab.

On the job PRODUCTION

Used at VUMC in a regulated clinical environment.

Endpoint & imaging

Windows 10/11PXE / WinPE / WIM32-port KVM imagingAD OU placementWOW carts

MDM & mobile

Microsoft IntuneApple Business ManageriOS provisioningAPN profiles

Support & tracking

Bomgar remote supportCisco Prime AP mappingPegasus CI (CMDB)VMware Horizon VDIPowerShell

Environment

HIPAA / PHI handlingClinical go-livesSwitch swaps & port remapsSOP writing

Lab & projects HANDS-ON

Built, broken, and documented on my own hardware and tools.

Security

Phishing simulationMITRE ATT&CKOSINT / reconNmapMetadata forensicsRisk assessmentSecure data destruction

Systems

Windows Server 2022 / AD DS labLinux (Ubuntu, Debian, Arch)Kali LinuxDocker / PortainerOllama

Networking

TCP/IPDNS / DHCPWireGuardTailscaleOpenWrtAdGuard Home

Scripting & web

PowerShell WPFPythonBashHTML / CSS / JSVercelGoogle Cloud Run
04 · Credentials

Certifications & education

A+

CompTIA A+

Valid 2024–2027

ACTIVE
N+

CompTIA Network+

Passed March 2025

ACTIVE
G

Google IT Support Professional

2024 · Support, sys admin, networking

EARNED
A

CDL Class A

Commercial Driver's License

ACTIVE

In progress

CompTIA Security+ SY0-701

~80%

Practice-quiz average · exam being scheduled

B.S. Cybersecurity

~50%

Western Governors University

05 · Dark Fire Security

DARK FIRE

Faith · Technology · Protection

Cybersecurity consulting for small businesses, farms, and tradespeople in Middle Tennessee. The Business Security Checkup works like a home inspection: a clear report card and a fix list, without an enterprise budget.

Visit darkfiresecurity.com Free small-business eBook

The Checkup

$299

One machine, the network, and a plain-English report card.

The Lockdown

$899

Up to five machines plus on-site remediation.

The Watch

$149/mo

Quarterly re-checks and priority access.

Also: phishing awareness training with PhishGuard, risk assessments, and policy guidance.
06 · Contact

Let's talk.

Open to SOC analyst, cybersecurity, and senior IT roles in Nashville and Middle Tennessee, or remote with a strong security mission.

Emailthechancecummings@gmail.com
Phone615-693-1113 LinkedInin/chance-cummings GitHubgithub.com/jazzy216 ResumeDownload PDF