Sandi Mcmillin Email & Phone Number

Pasadena, Md, Us

Annapolis Junction, Maryland, United States

• Spearheading security automation to enhance the efficacy of the Information Systems Security Team utilizing enterprise tools to include Splunk and ServiceNow• Teaming with Splunk vendor engineer to bring ideas to conception• Teaming with other internal organizations to utilize data feeds currently being captured • Developing automations allowing the team to proactively ensure accuracy of data before modernization efforts• Evolving the information provided to senior executive leadership for Daily Status Review (DSR)

• Championed an unprecedented global transition of over 100+ SSPs with over 300,000 endpoints• Established and managed a highly qualified team of ISSO/ISSEs• Performed baseline analysis of SSP compliance for review with the Client, Executive Leadership, and contracting officers• Implemented team and process changes to adjust to the influx of SSPs and maintain success for SSP authorization and continuous monitoring• Fostered working relationships with the Client InfoSec Leaders, System Owners, DAOs, ISSMs, ISSOs and contract partners as well as internal organizations team members and leads.• Managed multiple systemizations and overhauled roles/functions of the team to increase overall team performance• Successful in negotiation with client Senior Executive Leadership to spread out the authorization dates for all SSPs within our AOR to allow for the ability of the team to be successful in meeting the timelines• Led efforts to automate the Acquisition Security Process, and streamlining of the PRIVAC process• Performed numerous interviews, hiring, and prepared award write-ups and yearly reviews• Served as backup for ISS Director in their absence

• Responsible for operation and maintenance of over 50 boundary devices• Provided technical guidance and mentorship to junior team members• Ensured all actions taken to secure the network met proper security policies and best practices while maintaining the health and security posture of the infrastructure• Maintained scheduling for team members for call-in purposes to ensure response to all after hours emergencies were addressed effectively

• Identified and responded to various potentially malicious, suspicious, and exploitative threats and vulnerabilities • Investigated, analyzed, and characterized enterprise-wide host-based events to identify possible insider threat and policy violation activity• Enforced compliance with security policies, standards, and guidelines• Reviewed and compiled data necessary for analysis and case reporting• Created, notified, and disseminated reports identifying significant security events• Executed on-demand data extraction and querying as necessary, or as requested by the customer• Trained and provided mentorship to new/junior analysts on daily job duties, functions and responsibilities• Utilized numerous tools to include: Insider Threat Data Analysis tools – Sureview/Innerview; Fraud, Waste, and Abuse Analysis tools – Netwitness and CoolMiner, Data Forensics – EnCase; and numerous in-house PCAP Analysis tools• Obtained the following DCITA certifications: DoD Certified Basic Computer Crimes Investigator, Digital Forensics Examiner, and Digital Media Collector