Sam Bederman
Education
Texas A&M University - College StationAug 2023 – May 2027
Bachelor of Science in Computer Science, 3.93 GPA | Minors: Cybersecurity, Music Technology
Skills
- Programming: Python, C++, C, Node.js, KQL, SQL, Java
- AI & Automation: LLM agents, MCP, OpenAI API, LLM security, Workflow automation
- Development & Infrastructure: Git, Docker, Google Cloud Platform (GCP), Azure DevOps, Win32 API
- Security: Elastic Stack, CrowdStrike, Burp Suite, Sigma, YARA, MITRE ATT&CK, Microsoft Defender
Experience
MicrosoftMay 2026 – Aug 2026
Security Research Intern
- Built a synthetic telemetry framework to automate end-to-end validation of security detections
- Developed an LLM agent using Playwright MCP to confirm alert defects, replacing manual bug-bashing
- Built a 7-stage pipeline to generate an alert and report in ~20 minutes, 25x faster than the prior method
- Diagnosed production detection-rule failures across 29 tenants and proposed a fix to the detection owner
Capital OneJun 2025 – Aug 2025
Threat Detection Engineer - Cyber Security Internship Program
- Built automated attack simulations to validate existing detections and identify coverage gaps
- Developed detections for previously uncovered macOS and Linux attack techniques
- Researched MITRE ATT&CK techniques to evaluate security coverage and detection feasibility
Hitachi EnergyMay 2024 – Aug 2024
Cyber Security Analyst Intern
- Managed Burp Suite Enterprise and used automated scanning to support application security testing
- Evaluated threat modeling tools and wrote technical documentation to support their use
- Led a project to automate security questionnaire data analysis
Texas A&M UniversityNov 2023 – Present
Cyber Security Apprenticeship Program - Student Security Analyst
- Triaged hundreds of alerts and identified threats using SIEM, IPS/IDS, and EDR systems
Projects
COM Hijacking ResearchMay 2025
- Investigated 6 COM hijacking techniques and built exploits in C and Win32, using Koppeling for DLL proxying
- Research led to an accepted contribution (#5526) to Elastic’s Detection Rules repository
Security Research LabJan 2025 – Present
- Built a networked lab with Kali, FLARE-VM, and REMnux for malware research and detection engineering
- Configured a containerized Elastic defend instance with Tailscale to test activity and collect security telemetry
Performance-Optimized Multithreaded Graph TraversalJan 2025 – Mar 2025
- Built C++ and Win32 graph traversal programs using pipes to coordinate work across threads
- Implemented BFS, DFS, best-first search, and A*, then developed a second version using batched BFS
- Documented both implementations in technical reports: v1 and v2
Certifications
CompTIA Security+Dec 2024
GIAC Certified Incident Handler (GCIH)May 2024
GIAC Security Essentials (GSEC)Aug 2023
Awards
1st Place Information Security Talent Search (ISTS)Mar 2025
1st Place TAMUctfMar 2025
3rd Place TAMUctfApr 2024
National Cyber Scholar with Honors2022, 2023, 2024