Hello and welcome to another episode of "Splunk Smartness," the interview series where we explore the power of Splunk Education in helping us optimize Splunk to create more resilient organizations. I'm your host, Callie Skokos, and today, I'm thrilled to have Brandon Sternfield, a Principal Cyber Security Architect, joining us from Northern Virginia. Brandon, welcome to the series!
Brandon Sternfield: Thanks, Callie! Happy to be here and excited to chat.
Callie: Brandon, before we dive into your professional life, I hear you're quite the gamer and learner. Can you share more about your hobbies?
Brandon: Absolutely, Callie. I’m an avid student of just about anything, and in my downtime, I dive into the world of gaming. I lead guilds in MMOs, enjoy FPS games, and I'm really into roguelite-style games. These games not only relax me but also sharpen my strategic thinking.
Callie: That sounds like a perfect blend of fun and skill-building. Now, let's talk about your journey with Splunk. How did you first get introduced to it?
Brandon: My first encounter with Splunk was back in 2016 when I was a Penetration Tester for a Splunk Partner. They offered free training, which I could do on the clock, so it was a win-win. That training led me to start experimenting with Splunk, automating reports, and eventually crafting visualizations and dashboards for security campaigns.
Callie: What a great way to start! What specific Splunk products do you work with most often?
Brandon: I primarily work with Splunk Enterprise and Splunk Enterprise Security. I've also explored Splunk IT Service Intelligence and Splunk SOAR, and I've been brainstorming some potential applications for Splunk Edge Hub as well.
Callie: How did you go about learning to use these tools effectively?
Brandon: It began with the free eLearning opportunities offered by Splunk. Then, as I moved roles from working in a SOC to becoming a full Splunk Admin, I took several instructor-led classes. A significant part of my learning came from setting up Splunk at home and applying it on the job in real environments.
Callie: That’s such a great way to learn and then put those skills to the test. Oh, and speaking of testing, do you hold any Splunk Certifications?
Brandon: Yes, I've earned eleven certifications so far, ranging from User, Admin of the Premium Apps ITSI, ES, and SOAR, Cybersecurity Defense Analyst and I just recently earned my Consultant certification. I'm currently waiting on the results for the Cybersecurity Defense Engineer beta exam as well.
Callie: That's so impressive, Brandon. Wow. You really seem super dedicated to fully optimizing Splunk in your organization. Have you ever been able to find time to attend any Splunk University bootcamps?
Brandon: While I didn't attend any at .conf24, I did participate in the Architecting Deployments and Advanced Dashboarding bootcamps at .conf23. These sessions are incredibly immersive and a fantastic way to deepen your knowledge.
Callie: What did you think about the community vibe when you attended Splunk University in Las Vegas?
Brandon: Oh, it was really impactful. In fact, I’ve been active in the Splunk Community for years and I was even selected to volunteer at the Splunk Community Zone at .conf24, This year, I was nominated and chosen for Splunk MVP based on my strong contributions to the Community! I look forward to maintaining my status as a Splunk MVP and hopefully working my way to Splunk Trust membership.
Callie: That’s so great! It's clear that Splunk has been a significant part of your career. How has optimizing Splunk helped in your career journey and advancement?
Brandon: It's been a cornerstone of my career development. I transitioned from Penetration Testing to Threat Hunting, to a Splunk Enterprise Security Admin, and now to a Splunk PS Consultant. Each step was facilitated by my deepening expertise in Splunk, showcasing a trajectory I hadn't imagined back when I started.
Callie: I always love to hear how Splunk has supported careers. Looking ahead, what are your future plans with Splunk or Splunk Certification?
Brandon: I'm really excited about integrating Splunk and Splunk ES into a scalable 'SOC in a box' deployment. I believe Splunk ES is top-notch, and I want to make it more accessible for our customers. Personally, I'm also planning to rebuild my home lab to integrate various data like weather info and utility bills to optimize my HVAC system—a fun project that combines my professional skills with personal interests.
Callie: Super fun and a great way to deepen your knowledge of Splunk in support of sustainability. I love it. Brandon, your journey and plans with Splunk are truly inspiring. Thank you for sharing your experiences with us today.
Brandon: Thank you, Callie. It’s been great talking with you and sharing my Splunk story!
Callie: That's it for today's episode of "Splunk Smartness." We'll be back next time with more insights on how Splunk can enhance your tech skills and career – and help you make your organization more resilient. Until then, stay smart and keep Splunking!
______________________________________________
PS: Be like Brandon and check out our latest Splunk Certification – Splunk Certified Cybersecurity Defense Engineer.
