Looking for a job

Sabrynn Elam

@sabrynnelam

I build and secure Splunk-based SOC platforms across cloud and on-premises environments.

At Sharp Solutions, I support a federal agency SOC by engineering and operating Splunk across a large cloud environment. I build searches, dashboards, data integrations, automation, and risk-based alerting while helping migrate on-premises systems to AWS.

Over 14 years in cybersecurity, I've supported SOC, incident response, vulnerability management, and security engineering teams at Copper River, Johns Hopkins University Applied Physics Laboratory, Raytheon Foreground Security, and Northrop Grumman. I bring hands-on experience with Splunk architecture, SIEM operations, security monitoring, threat triage, documentation, and FISMA and NIST RMF-aligned environments.

Experience

Work history, roles, and key accomplishments

Current

Splunk Subject Matter Expert

Current

Sharp Solutions Inc

May 2019 - Present (7 years 4 months)

Splunk Subject Matter Expert supporting a Federal Agency's Security Operations Center, responsible for preventing, identifying, containing, and eradicating cyber threats in a large clustered cloud environment. Led Splunk installations, upgrades, and migrations, and implemented Risk Based Alerting framework.

Security Engineer Level III

Copper River Enterprise Services

Apr 2017 - May 2019 (2 years 1 month)

Level III Log Aggregation Specialist within the Office of the Cyber Security Integrity Center (CIC) Security Engineering Team for the Department of State. Developed processes and procedures around security event management and supported Splunk implementation and utilization.

Splunk SIEM Regex PowerShell BASH FISMA NIST RMF Palo Alto Threat Detection RSA IronPort SEP Bromium IDS Incident Response Log Collection Dashboarding Correlation Rules

Cyber Security Analyst

Johns Hopkins University Applied Physics Laboratory

Oct 2016 - Apr 2017 (6 months)

Cyber Security Analyst within the Cyber Missions Group, continuously monitoring threats and performing real-time incident handling. Developed and enhanced content and methods for monitoring and incident response using multiple security tools.

Incident Response Threat Monitoring OSINT Malware Analysis NIST RMF Security Tools Triage Digital Media Analytics

Vulnerability Management Analyst

Raytheon Foreground Security

Aug 2016 - Oct 2016 (2 months)

Analyst providing Continuous Diagnostics and Mitigation (CDM) to over 40 data centers within the Centers of Medicare and Medicaid Services. Maintained system inventory, monitored vulnerability scans, and performed scheduled and ad hoc vulnerability scanning.

Tripwire Tripwire IP360 Vulnerability Scanning CDM Network Analysis Root Cause Analysis Profile Scanning Profiling

Incident Management Lead

Raytheon Foreground Security

Jan 2015 - Aug 2016 (1 year 7 months)

Incident Management Lead within the CMS Cybersecurity Integration Center (CCIC), ensuring integrity and protection of FISMA systems. Conducted investigations of security violations, performed vulnerability assessments, and oversaw POA&M processes.

Incident Management SIEM Splunk Trend Micro Tripwire IP360 RiskVision RSA Remedy Jira Archer CALT Vulnerability Assessment Penetration Testing FISMA NIST POA&M SOP Development Threat Intelligence

Shift Lead/Cyber Intelligence Analyst

Northrop Grumman

Jun 2013 - Dec 2014 (1 year 6 months)

Analyst within the Cyber Security Operations Center (CSOC) for the entire Northrop Grumman Enterprise network. Responded to computer security incidents, performed analysis and generated queries for intrusion detection, and created training documentation.

Incident Response SIEM ArcSight Splunk McAfee Endpoint Protection Sourcefire Snort Wireshark FireEye TCP IP APT Security Signatures Packet Captures Training Documentation Remedy

Cyber Analyst Intern

Northrop Grumman

May 2011 - Aug 2011 (3 months)

Summer intern within the Cyber Security Operations Center (CSOC), responding to computer security incidents and performing analysis in support of intrusion detection operations.

ArcSight Intrusion Detection Network Monitoring Regex Incident Response

Education

Degrees, certifications, and relevant coursework

Virginia Polytechnic Institute and State University

Bachelor of Science, Geospatial and Environmental Analysis with Computer Science

Bachelor of Science in Geospatial and Environmental Analysis with Computer Science, with a concentration in Computer Science Systems and Networking. Graduated in May 2013.