EXPERIENCE
Sarah Norris is a Security Consultant for TrustedSec. Sarah is starting her career in Information Security after conducting PCI audits for Trustwave. Before Trustwave, Sarah worked on Linux systems writing and debugging custom Python modules for Zenoss, the open source network monitoring software.
EDUCATION & CERTIFICATIONS
- Bachelor of Science, Cybersecurity, Utica College
- Certified Information Systems Security Professional (CISSP)
PROFESSIONAL AFFILIATIONS
Sarah Norris is a member of AHA (Austin Hackers Anonymous), Austin 2600, and lolctf.
PASSION FOR SECURITY
Sarah became interested in information security shortly after starting college. She realized that there was nothing more thrilling than picking a lock, cracking a password, or winning a CTF challenge.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
MSBuild: A Profitable Sidekick!
Using MSBuild to bypass security controls and escalate privileges without PowerShell, leverage native Windows binaries for flexible C# code execution.
Take Your Employees Phishing!
Improve your organization's user-based security posture with a realistic internal phishing campaign, educating employees on the tactics and techniques used by…
InfoSec World 2026
TrustedSec is proud to sponsor and have a booth at this year's InfoSec World!
Wild West Hackin' Fest 2026
We're thrilled to sponsor this year's Wild West Hackin' Fest and we'd love to see you at our booth!
GrrCON 2026
TrustedSec is proud to sponsor and have a booth at this year's GrrCON!
Risk at the Edge: Managing Cyber Exposure Across IT & OT Assets
Join Senior Security Consultant Steph Saunders for a practical look at how to close gaps and build cyber resilience across converged IT/OT environments.
NewsNation - Millions of IDs Potentially Exposed
IDScan, used by rental car agencies and online verification systems across the country, is at the center of a reported data breach involving over 153 million…
LLMHaxor Update
Today I am sharing some updates on a tool I created from an earlier time — before Burp Suite included native AI testing enhancements and before an almost…
CNBC - What's Behind Today's AI Outage?
Multiple AI platforms went down this week as a wave of new frontier models hit the market simultaneously, and China's distillation of US AI models is adding to…
waf-fu, or Some Log Replay Nonsense
AWS WAF logs are keeping receipts, including your session tokens. In this blog, we walk through the risk of default WAF logging configurations and the tool…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
