Skip to Main Content
All Trimarc services are now delivered through TrustedSec! Learn more

Sarah Norris

Senior Security Consultant

EXPERIENCE
Sarah Norris is a Security Consultant for TrustedSec. Sarah is starting her career in Information Security after conducting PCI audits for Trustwave. Before Trustwave, Sarah worked on Linux systems writing and debugging custom Python modules for Zenoss, the open source network monitoring software.

EDUCATION & CERTIFICATIONS

  • Bachelor of Science, Cybersecurity, Utica College
  • Certified Information Systems Security Professional (CISSP)

PROFESSIONAL AFFILIATIONS
Sarah Norris is a member of AHA (Austin Hackers Anonymous), Austin 2600, and lolctf.

PASSION FOR SECURITY
Sarah became interested in information security shortly after starting college. She realized that there was nothing more thrilling than picking a lock, cracking a password, or winning a CTF challenge.

Featured Blogs And Resources

Discover the blogs, analysis, webinars, and podcasts by this team member.

Blog June 25 2020

MSBuild: A Profitable Sidekick!

Using MSBuild to bypass security controls and escalate privileges without PowerShell, leverage native Windows binaries for flexible C# code execution.

Read about this article
Blog March 06 2018

Take Your Employees Phishing!

Improve your organization's user-based security posture with a realistic internal phishing campaign, educating employees on the tactics and techniques used by…

Read about this article
Webinars January 14 2026

Tips for Incident Response Planning: Prepare Before Crisis Strikes

During our next webinar, our Incident Response experts will cover what organizations should do to prepare so they can respond quickly and be on the way to…

Read about this article
Business Resources December 30 2025

Inside the Modern Red Team: How Attackers Think, and What Defenders Miss

Discover how modern Red Teams think like attackers, what defenders often miss, and how to strengthen your cybersecurity posture.

Read about this article
Blog December 18 2025

Limiting Domain Controller Attack Surface: Why Less Services, Less Software, Less Agents = Less Exposure

Before we dive in, let’s get all the TrustedSec Certified Absolutes out of the way:All software presents some level of inherent risk.Only required software…

Read about this article
News December 17 2025

News 5 Cleveland - Elyria Police responded to a reported restaurant robbery. But it was actually an AI prank.

AI quality is evolving rapidly, making it easier than ever to create convincing fakes from a phone. Advisory Solutions Director Alex Hamerstone spoke with News…

Read about this article
Blog December 16 2025

Top 10 Blogs of 2025

Everyone has a year-end list, and this is ours. See what our top-performing cybersecurity blogs were in 2025, there could be some you might have missed!

Read about this article
News December 13 2025

News 5 Cleveland - Holiday Warning: Keeping your loved ones safe from scams

As the holidays approach, the most effective defense against fraud is an informed family. Advisory Solutions Director Alex Hamerstone spoke with News 5…

Read about this article
News December 12 2025

Security Advisory: React2Shell (CVE-2025-55182) - Critical RCE Vulnerability

A critical vulnerability affecting React Server Components (RSC) is being actively exploited. Here's what to look for and what to do next.

Read about this article
News December 11 2025

WWL First News with Tommy Tucker - Holiday scams are in full swing. Here's how to protect yourself

Don't let scammers ruin your holiday season. Advisory Solutions Director Alex Hamerstone joins WWL First News to discuss the most common seasonal scams and…

Read about this article

Empower your business through better security design.

Talk directly with our experienced advisory consultants to learn how we can help.