Sandi Mcmillin Email & Phone Number

Pasadena, MD, US

Annapolis Junction, Maryland, United States

• Spearheading security automation to enhance the efficacy of the Information Systems Security Team utilizing enterprise tools to include Splunk and ServiceNow
• Teaming with Splunk vendor engineer to bring ideas to conception
• Teaming with other internal organizations to utilize data feeds currently being captured
• Developing automations allowing the team to proactively ensure accuracy of data before modernization efforts
• Evolving the information provided to senior executive leadership for Daily Status Review (DSR)

• Championed an unprecedented global transition of over 100+ SSPs with over 300,000 endpoints
• Established and managed a highly qualified team of ISSO/ISSEs
• Performed baseline analysis of SSP compliance for review with the Client, Executive Leadership, and contracting officers
• Implemented team and process changes to adjust to the influx of SSPs and maintain success for SSP authorization and continuous monitoring
• Fostered working relationships with the Client InfoSec Leaders, System Owners, DAOs, ISSMs, ISSOs and contract partners as well as internal organizations team members and leads.
• Managed multiple systemizations and overhauled roles/functions of the team to increase overall team performance

• Responsible for operation and maintenance of over 50 boundary devices
• Provided technical guidance and mentorship to junior team members
• Ensured all actions taken to secure the network met proper security policies and best practices while maintaining the health and security posture of the infrastructure
• Maintained scheduling for team members for call-in purposes to ensure response to all after hours emergencies were addressed effectively

• Identified and responded to various potentially malicious, suspicious, and exploitative threats and vulnerabilities
• Investigated, analyzed, and characterized enterprise-wide host-based events to identify possible insider threat and policy violation activity
• Enforced compliance with security policies, standards, and guidelines
• Reviewed and compiled data necessary for analysis and case reporting
• Created, notified, and disseminated reports identifying significant security events
• Executed on-demand data extraction and querying as necessary, or as requested by the customer