SANS.edu Success Stories

Q.  Congratulations on being named an RSA Scholar. What are you most looking forward to at the RSA Conference?

A. I'm really excited to experience the RSA Conference and meet other security professionals. I'm looking forward to connecting not only with those already in the industry but also with participants in the security scholar program—the next generation of professionals. I'm eager to gain perspectives outside of my daily work bubble and to hear insights on the current state of the industry and its future direction.

Q. How did you get interested in cybersecurity?

A. For nearly a decade before diving into a full-time cybersecurity career, I worked in IT support for the Salisbury Township School District. During this period, I developed a keen interest in ethical hacking as a side hobby. What started as a casual interest quickly grew into a passion, ultimately transforming into an exciting new career path.

Initially, I didn't see it as something that would turn into a job; I just found it fascinating and wanted to learn more. As I paid attention to the news, I noticed more headlines about ransomware and cybersecurity attacks targeting education and healthcare. My mom, a retired nurse, and my experience working with educators made these attacks feel personal. These are vulnerable people with challenging jobs, and they shouldn't have to deal with such threats. This realization ignited a fire in me.

Q. What does your current position entail?

A. I'm a senior threat detection engineer at Anvilogic, a company that specializes in detection engineering for enterprise security teams. Working at a startup means every day is filled with new challenges and opportunities.

Some days, I collaborate closely with our threat research team to identify detection opportunities and create detection content. Other days, I might be exploring new log sources or translating queries between different languages. Sometimes, I'm testing exploits in our lab or working with our data science team to fine-tune our rules and providing feedback on outputs from our AI models. It's a dynamic role that keeps me engaged and constantly learning, offering a bit of everything.

Q. What do you like most about cybersecurity?

A. What I love most about cybersecurity is that there's always something new to learn. It's both the best and the most challenging part of the field. Staying current requires hard work, but as someone who identifies as a lifelong learner, I find it incredibly rewarding. I love that there's always something new to discover. It also takes the pressure off because the field is so broad—I'll never know everything, and that's okay.

Q. Prior to attending the SANS Technology Institute, what was your educational background?

A. I graduated from Full Sail University with a degree in entertainment business. Prior to that, I earned my associate’s degree in audio production.

Q. How did you hear about SANS Technology Institute?

A. Education has always been important to me, and I knew I wanted to pursue a graduate degree at some point, regardless of the field. While working in entry-level cybersecurity positions over two years, I realized I had much more to learn. During this time, I frequently heard from colleagues and industry professionals about the excellent quality and value of SANS.edu training. When I discovered that I could earn a master's degree while also obtaining GIAC certifications, my interest was piqued.

Q. Why did you choose to enroll in SANS Technology Institute master’s program?

A. After changing careers and coming from a somewhat non-traditional path, I knew there were some gaps in my knowledge. Pursuing a master's degree seemed like the fastest way to bridge those gaps. I was generally looking for advanced education opportunities, and the chance to achieve both a degree and valuable, well-recognized certifications through SANS.edu's master’s program was a game-changer for me.

Q. From your research how did the SANS programs differ from other programs of its kind?

A. There were two main factors I was looking for in any master's program: quality and flexibility. I wanted to be confident that I was getting the best quality education with up-to-date, actionable content in the curriculum. I've heard from people attending other institutions that some classes felt like filler and weren't directly related to their career goals. For me, it was crucial that whatever I was studying and investing time and money into was relevant.

Flexibility was also a significant factor. Between working full-time and having family responsibilities, a rigid brick-and-mortar institution with specific schedules wouldn't work for me. SANS.edu programs offered the flexibility I needed, allowing me to balance my professional and personal life while pursuing my education.

Q. How did you fund the program?

A.  I'm using SANS’ tuition payment program, which allows me to spread the payments over several years. This interest-free approach helps me manage the costs without having to take out student loans.

Q. What are some of your favorite courses?

A. I've really enjoyed several courses. Among my favorites is FOR508, Advanced Incident Response & Threat Hunting, and Digital Forensics which is incredibly valuable. Currently, I'm working on FOR610, Reverse Engineering Malware Analysis Tools and Techniques, and it's been a lot of fun. Honestly, I haven't taken a bad course yet—I could list them all!

Q. What did you find most valuable about the programs?

A: One of the biggest needs I identified was filling the gaps in my knowledge, as I entered the security industry somewhat later. The program has significantly boosted my confidence and technical skills, which has been incredibly valuable.

Additionally, the core program includes some required courses that I might not have chosen on my own. For example, SEC503, the Network Monitoring and Threat Detection course was very challenging, I'm so glad it was required because the technical skills I gained from it were truly transformative.

Q.  Did you take classes online or at live events? How was that experience?

A. So far, all of my classes have been online, and I can't imagine doing it any other way. With my busy work schedule and other commitments, the flexibility of online classes has been wonderful. I don't have to worry about showing up at a specific time or being away from home for a week. The ability to fit the coursework into my schedule has been a crucial factor in making the program work for me.

Q. Can you tell me about how the student advising experience at SANS.edu worked for you?

A. I worked with a student adviser, NaKeisha Talley, who has been fantastic. She always has answers to my questions or quickly finds them if she doesn't know offhand. NaKeisha regularly checks in to ensure I'm on track without micromanaging, making the advising experience supportive. It is always wonderful to hear from NaKeisha.

Q. How has your SANS.edu education to date impacted your career trajectory?

A. During the master's program, I was promoted to a senior role, which I believe was partially influenced by the technical skills I gained. The quality of my work has definitely improved, and I can't rule out the program as a contributing factor. The exposure to various courses has provided me with numerous options if I ever decide to pursue something other than detection engineering.

I feel much more confident about transitioning to other areas of security without too much trouble. The skills I've picked up from classes have directly enhanced the detection content I create. My boss can tell I've gained knowledge that I wouldn't have otherwise.

Q. What advice would you offer someone considering applying to the SANS Technology Institute?

A. I cannot speak highly enough about the quality of SANS Technology Institute. The content of the courses is excellent, and the way they’re presented is outstanding. SANS.edu provides a wealth of information, so effective time management is crucial. The curriculum is meticulously designed and demonstrates a high level of care. I highly recommend SANS.edu.

Q. What’s next for Christina Westfall?

A. Hopefully, I'll be with Anvilogic for a long time, as I'm really enjoying my time there. I can see myself focusing more on the security research side of things, even though detection engineering already involves some of that. I envision transitioning into a role where I can dedicate more time to research.

See More Success Stories