Open to SOC Analyst, Security Analyst & Security Administrator roles

I secure identities, endpoints, and access and teach others how.

I’m Samson, an IT and security professional with 3+ years in enterprise environments. I run access audits, manage identity and endpoint security tools, and investigate what looks wrong. As Security With Sam, I make cybersecurity practical for 32K+ followers.

Download resume Get in touch

3+ yrsEnterprise IT & security
80+Accounts in monthly SOX access audits
70+Users supported as primary site IT contact
32.2KSecurity With Sam followers

01Experience

Hands-on security work in real environments.

Identity, endpoint security, audits, and the day-to-day IT operations that keep them working.

Nov 2026 — Present

Current role

Associate Technical Consultant Provalus

Joining Provalus, a U.S.-based IT and business process services company, as an Associate Technical Consultant in November 2026.
Nov 2025 — Oct 2026

St. Croix Falls, WI
IT Technician Ducommun Inc.

Primary site IT contact supporting identity, endpoint security, infrastructure, and security operations for 70+ users and hundreds of endpoints.
- Identity & access. Administered identity lifecycle and access controls across Active Directory, Okta, and Microsoft 365, including privileged and generic accounts, MFA/YubiKey, and least privilege.
- Audit & compliance. Ran monthly SOX access audits across 80+ user, service, and generic accounts. Reconciled HR records to Active Directory, maintained evidence, remediated discrepancies, and supported NIST/CMMC readiness.
- Investigation. Investigated endpoint and access findings with CrowdStrike Falcon, Tanium, Zscaler, and Varonis, validated device posture, and supported incident response.
- Data protection. Supported CUI handling by validating BitLocker protection and securely sanitizing retired media with KillDisk. Supported VLAN-based network segmentation.
- CrowdStrike Falcon
- Okta
- Active Directory
- Microsoft 365
- Tanium
- Zscaler
- Varonis
- BitLocker
Oct 2023 — Oct 2025

Minneapolis, MN
IT Manager North House

Owned IT operations, identity, and security awareness for the organization.
- Identity lifecycle. Administered provisioning, access changes, recovery, and offboarding across Microsoft Entra ID, Google Workspace, and business SaaS.
- MFA rollout. Implemented and enforced MFA across Entra ID, Google Workspace, and other SaaS platforms, including enrollment, resets, and recovery.
- Phishing response. Investigated user-reported phishing and suspicious messages, assessed indicators of malicious activity, and guided remediation.
- Security awareness. Delivered training on phishing, password security, MFA, and account protection, and managed Windows/macOS endpoint deployment.
- Microsoft Entra ID
- Google Workspace
- MFA / SSO
- Windows
- macOS

02Projects

Labs I built, broke, and documented.

Each lab has a step-by-step write-up with screenshots of the actual environment.

Samson's homelab mini rack with a patch panel, network switch, mini PC, and compact servers

View full photo

Infrastructure / Homelab

Homelab mini rack

My homelab, rebuilt into a compact mini rack. A Proxmox host runs the services I use to practice Linux administration, secure remote access, DNS filtering, credential management, and network visibility.

Tailscale: Secure remote access
Pi-hole: Network-wide DNS filtering
Vaultwarden: Self-hosted credential management
NetAlertX: Device and network visibility

Next up: a two-drive NAS on a ZimaBoard 2 for local storage and backups.

Watch the rack build

Detection

Wazuh SIEM lab

Deployed Wazuh in VMware to monitor three Windows endpoints and one Ubuntu endpoint. Generated brute-force and privilege-escalation activity, then triaged alerts, file-integrity changes, and vulnerability findings mapped to MITRE ATT&CK.

Wazuh
VMware
FIM
MITRE ATT&CK

Read the write-up

Exposure

Nessus vulnerability management

Ran credentialed scans against two Windows 11 endpoints, analyzed findings by severity and affected system, and prioritized remediation by risk.

Tenable Nessus
Windows 11
Risk prioritization

Read the write-up

Identity

Active Directory lab

Built a Windows Server 2025 domain with two Windows clients in Hyper-V. Configured DNS, users and groups, Group Policy, domain authentication, and role-based access.

AD DS
Hyper-V
Group Policy
RBAC

Read the write-up

Network

Pi-hole DNS filtering

Deployed centralized DNS filtering for a home network and analyzed query activity, blocklists, and network-level controls.

Pi-hole
DNS
Query analysis

Read the write-up

Training

TryHackMe SOC Level 1. Completed labs in alert triage, reporting and escalation, SIEM, EDR, threat intelligence, DFIR, and IOC prioritization using the Pyramid of Pain.

03Skills

The toolkit.

Security operations

CrowdStrike Falcon, Wazuh SIEM, Elastic Security, EDR, alert triage, log analysis, incident response, Tenable Nessus, vulnerability management, FIM, MITRE ATT&CK

Identity & access

Active Directory, Microsoft Entra ID, Okta, Google Workspace, Microsoft 365, MFA/SSO, YubiKey, RBAC, least privilege, access reviews

Endpoint & infrastructure

Tanium, Zscaler, Varonis, BitLocker, Windows, Linux, macOS, VLANs, DNS, DHCP, Proxmox, Tailscale

Governance & compliance

NIST, CMMC, SOX, CUI handling, access audits, audit evidence, secure media sanitization

04Security With Sam

Cybersecurity made simple, for 32K+ followers.

Security With Sam is my content brand. I make hands-on videos about cybersecurity, IT, homelabs, and tech, covering Windows security, BitLocker, networking, privacy, and the tools IT pros actually use.

32.2KTotal followers across four platforms