$ whoami
I engineer trust into mission-critical systems — and let AI carry the busywork.
Cybersecurity engineer securing the systems that defense and federal missions depend on.
I'm an Information System Security Engineer supporting the Defense Counterintelligence and Security Agency (DCSA) through ASRC Federal. My work lives at the intersection of risk management, security engineering, and compliance — assessing threats across the program lifecycle, validating security designs in hardware, software, and data, and shepherding systems through certification and accreditation.
Over the last five years I've defended networks across the U.S. Army, DISA, the Air Force Research Laboratory, and the Marine Corps — hunting threats with ACAS, HBSS, Splunk, and ArcSight, standing up SIEM pipelines, and hardening infrastructure to STIG and SRG baselines. I translate dense security requirements into documentation that teams can actually act on, which is how my Security Configuration Guides cut ambiguity out of the ATO process for an entire enterprise.
I'm also deep in graduate study — pursuing dual MSc degrees in Cybersecurity at Georgia Tech and Johns Hopkins — and I build AI into everything I do, from automating evidence collection to researching how to secure agentic AI systems themselves.
MSc, Cybersecurity — Information Security
Georgia Institute of Technology
Feb 2025 — Present
MSc, Cybersecurity
Johns Hopkins University
Mar 2024 — Present
BSc, Computer Networks & Cybersecurity
University of Maryland Global Campus
May 2022
AA, Paralegal Studies
Hagerstown Community College
May 2020
CompTIA Security+
CompTIA
Active TS/SCI Clearance
U.S. Government
Security work is drowning in documentation, mapping, and evidence collection. I treat AI as a force multiplier — using Claude and Claude Code as engineering partners to compress days of toil into hours, then applying that same security rigor to the AI systems themselves.
I pair with Claude and Claude Code to draft Security Configuration Guides, mitigation statements, and control narratives — turning dense STIG and RMF requirements into review-ready documentation in a fraction of the time.
Python tooling, refined with AI, handles the repetitive grind: extracting PPSM records, formatting eMASS ingests, batching POA&M extensions, and collecting accreditation evidence — consistently and at scale.
I research and apply security to agentic AI: least-privilege tool access, prompt-injection defense, and guardrails so autonomous agents stay inside their authorization boundary — bringing RMF discipline to the AI frontier.
// outcome: the same security rigor — delivered faster, documented better, and applied to the AI itself.
Toil → Hours savedSelected engagements across compliance engineering, security operations, cloud, and AI security.
Compliance Engineering
Authored 20+ SCGs spanning 10+ mission systems for the DCSA OCIO and Program Execution Office — including a single guide covering every enterprise workstation and printer on NIPRNet.
AI Security
Applying RMF discipline to autonomous AI: hardening agentic workflows with least-privilege tool access, prompt-injection defenses, and authorization-boundary guardrails.
Security Operations
Stood up a SIEM pipeline for a Professional Employer Organization — defining enterprise IAM roles and shipping log ingestion on AWS with Python and Elasticsearch Cloud.
Offensive / Risk
Bi-vulnerability assessment and penetration testing supporting a 23 NYCRR 500 annual compliance gap assessment for a regional insurance entity.
Infrastructure Security
Hardened Air Force Research Laboratory networks across NIPRNet/SIPRNet — running STIGs and SRGs, remediating vulnerabilities, and improving overall security posture.
Governance & Risk
Supported mission systems across 1,000+ POA&M extension requests, drafted mitigation statements for 8+ systems, and contributed to insider-threat detection and mitigation.
From governance and compliance to live threat hunting, cloud, and AI-assisted engineering.
Five years across the U.S. Army, DISA, AFRL, the Marine Corps, and DCSA.
ASRC Federal
Client: Defense Counterintelligence and Security Agency (DCSA)
Hanover, MD · Hybrid
ECS Federal LLC
Client: Marine Corps Community Services (MCCS)
Quantico, VA · Hybrid
EPS Corporation
Client: Air Force Research Laboratory
Rome, NY · Onsite
Keyes Information Technology, LLC
Fort Drum, NY · Hybrid
U.S. Army
Client: DISA Cybersecurity & Defensive Cyber Operations
Fort Drum, NY · Onsite
Open to conversations about cybersecurity engineering, RMF and accreditation, threat operations, and applying AI to harden — and be hardened by — security teams.
$mail sambajalloh@protonmail.com