Photo of Cole Blahut

Cole Blahut

Cybersecurity Analyst

About Me

Current student at Penn State University studying Cybersecurity Analytics and Operations. I’m passionate about technology, problem-solving, and developing the skills needed to build a career in cybersecurity. I enjoy video editing, content creation, basketball, and spending time with friends. I like combining technical and creative interests, whether I’m analyzing a security problem or creating something from scratch.

Experience

Audits Without Anxiety — Cyber Security Consultant Intern

May 2026 – August 2026 · Dresher, PA
  • Supported 3 client cybersecurity assessments alongside senior consultants, reviewing security controls, preparing compliance documentation, and identifying potential gaps in information security practices.
  • Assisted with PCI DSS assessments by reviewing 200+ evidence items and mapping them to 45 sub-requirements across access management, encryption, vulnerability management, and logging, while documenting control gaps and tracking remediation.

Cybersecurity Consulting Club — Officer

September 2025 – Present · State College, PA
  • Plan events, coordinate logistics, and recruit members for a student club focused on cybersecurity consulting and risk management, organizing professional development opportunities that introduce students to industry practices.

Projects

SolarWinds SUNBURST: Breach Impact & Remediation Strategy

Independent case study · July 2026 · Strategy, operations, technology & systems

Analyzed the 2020 SolarWinds supply-chain breach as a consulting engagement: quantified the business impact from SEC filings, mapped root causes, and built a prioritized 90-day remediation roadmap with cost-benefit analysis.

Read the full case study →

AI-Assisted Software Reverse Engineering & Behavioral Analysis

Independent cybersecurity lab · October 2024 · Python, AI-assisted analysis & software behavior

Investigated a benign file-manifest utility using controlled black-box probes, evidence capture, and AI-assisted hypothesis generation. Validated file filtering, JSON output, error behavior, and SHA-256 content sensitivity, then documented findings and regression tests.

Read the full technical project →

Security Operations Assessment and Risk Reduction Plan

Independent simulation · December 2025 · Analytics, identity security & risk advisory

Analyzed 600 synthetic authentication events, documented suspicious patterns, prioritized identity-security risks, and developed a measurable 30/60/90-day remediation roadmap.

Read the full assessment →

Technical Skills

Cybersecurity

PCI DSS compliance, risk assessment, black-box testing; Splunk, Wireshark, Nmap, Nessus, Metasploit, Autopsy, Ghidra

Programming & Infrastructure

Python (pandas), SQL, JavaScript, Java, C/C++, R, PowerShell, HTML/CSS; TCP/IP, DNS, DHCP, NAT, firewalls, VMware, Cisco Packet Tracer