Sarah Reddish

Security Operations AnalystHuntress

Sarah's cybersecurity career took the scenic route and that's exactly what makes her good at it.

After earning a computer science degree, she got a front-row view of IT operations as a Senior Field Service Technician at Boyd Gaming. That experience opened her eyes to the wider world of IT and sparked something bigger: a drive to protect people from cyber threats. By night, she was earning certifications and listening to Darknet Diaries. Eventually, she joined Boyd's internal SOC and found her lane.

Since then, Sarah's worked across SOC operations, security administration, governance, risk, and compliance (GRC), and managed detection and response (MDR), with stops at Credit One Bank, Ahern Family of Companies, and Ankura Consulting.

Today, Sarah specializes in analysis and triage at Huntress, where she's part of a global team of security analysts who bring curiosity, expertise, and just the right amount of healthy skepticism to the job. Her best cybersecurity advice? "Treat urgency as a warning sign. Pause, verify the sender, and never let pressure make the decision for you."

When she's not hunting threats, Sarah rides motorcycles, cosplays at conventions, and games hard enough to offset a career spent chasing attackers.

Blog Posts By This Author

Read more about Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
Blog Post

A recent phishing campaign abused Microsoft Power BI links to deliver multiple rogue ScreenConnect clients.

Read more about The Rogue RMM Stack: One Phish, Multiple Persistence Paths
The Rogue RMM Stack: One Phish, Multiple Persistence Paths
Blog Post

The Huntress SOC uncovered phishing attacks that trick employees into installing rogue RMM tools like ScreenConnect for persistent access. Learn how to spot it.

Read more about Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence
Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence
Blog Post

See how a browser-in-the-browser phishing attack led to rogue ScreenConnect persistence and evasion tactics Huntress caught in the act.