Open to opportunities

Abram Sirek

@abramsirek

Message

GIAC-certified threat analyst building live adversary telemetry, detection workflows, and incident response skills.

United States

Message

What I'm looking for

I’m looking to work in fast-paced security operations, MDR, or incident handling—using alert triaging, packet analysis, and endpoint forensics to turn threat telemetry into actionable detections and defensible incident responses.

I’m a SANS Institute of Technology student and GIAC-certified analyst (GCIA, GCIH) focused on analyzing live adversary threat activity. I map host and network telemetry to the MITRE ATT&CK framework while sharpening my skills in alert triaging, packet analysis, and endpoint forensics for real security operations work.

In my SANS Internet Storm Center (ISC) 2026 Cybersecurity Research & Threat Analysis Internship, I monitored a production SSH honeypot under high-velocity brute-force activity. I reverse-engineered multi-stage post-exploitation execution chains averaging 13 seconds, isolating persistence mechanisms, defense evasion tactics, and payload distribution—then identified and extracted IOCs and mapped malicious behavior directly to ATT&CK.

I also strengthen my incident-handling instincts through hands-on simulation and training, including a multi-stage corporate network breach scenario where I used Nmap, Metasploit, Hashcat, Bash, and PowerShell to uncover vulnerabilities and verify attacker TTPs. I’m looking to leverage this practical, defensible approach in a fast-paced security operations, MDR, or incident handling environment.

Experience

Work history, roles, and key accomplishments

Current

Para-Professional

Current

Lily Lake Elementary School

Jan 2024 - Present (2 years 6 months)

Maintained student safety and de-escalated high-stress behavioral events using active crisis intervention techniques. Documented daily progress data and worked with educational teams to execute individualized student support plans.

Crisis Intervention De escalation Behavioral Support Plans

Assistant Youth Hockey Coach

New Richmond Youth Hockey Association

Jan 2023 - Jan 2024 (1 year)

Coached a team of 15–20 youth athletes, breaking down positioning strategies and providing clear performance feedback to improve execution. Enforced safety compliance and kept close situational awareness during high-velocity on-ice drills.

Youth Sports Coaching Positioning Strategy Coaching Safety Compliance On Ice Drill Facilitation Situational Awareness

Server / Cook / Cashier

Various Establishments

Jan 2018 - Jan 2024 (6 years)

Handled high volumes and rapid shift paces while maintaining food safety and service quality standards. Resolved customer complaints directly under pressure and trained incoming staff on kitchen safety, POS workflows, and daily operational routines.

Food Safety Customer Service Complaint Resolution PO Workflows Kitchen Safety Staff Training

Cybersecurity Threat Analysis Intern

SANS Internet Storm Center

Jan 2026 - Present (6 months)

Monitored a production SSH honeypot for high-velocity brute-force attempts and analyzed rapid post-exploitation execution chains to identify persistence, evasion, and payload behavior. Extracted indicators of compromise (IoCs) and mapped malicious session behavior to the MITRE ATT&CK framework, authoring an ISC-style technical threat report with defensive recommendations.

Post Exploitation Execution Chain Analysis Threat Report Writing IOC Extraction

Incident Response Simulation

SANS Institute

Jan 2025 - Present (1 year 6 months)

Investigated a multi-stage corporate network breach simulation using incident-handling lifecycles and used Nmap, Metasploit, Hashcat, Bash, and PowerShell to identify vulnerabilities and audit attacker TTPs. Completed challenges by locating indicators of attack (IOAs) and verifying explicit exploits.

Nmap Metasploit Hashcat BASH PowerShell IOA Identification Vulnerability Assessment TTP Analysis