Security analyst, AI risk and GRC roles
Works remotely. Available for consulting, contract and full-time engagements worldwide.
Ian Job
Professional Summary
Cybersecurity consultant specializing in AI security and governance, risk and compliance, with hands-on work across security operations, web and infrastructure security, threat intelligence, email security and vulnerability management. Brings a professional foundation in website operations, digital analytics and automation. Builds and publishes working security tools, documents hands-on detection labs, and approaches every problem with evidence, clear documentation and reproducible methods.
Core Competencies
Log analysis and alert triage across Windows Event Logs, Sysmon and Linux auth logs; Splunk SPL queries; MITRE ATT&CK mapping; IOC extraction and defanging.
DNS, TLS and HTTP security headers (CSP, HSTS, frame protection); SPF, DKIM and DMARC; OWASP Top 10; WordPress and web server hardening; SSRF-safe tool design.
Prompt injection and LLM application risks, AI agent tool permissions, sensitive data exposure, and evaluation design, guided by the OWASP Top 10 for LLM Applications and MITRE ATLAS.
Risk registers, control inventories and framework mapping using NIST CSF 2.0, the NIST AI Risk Management Framework, ISO/IEC 27001 and ISO/IEC 42001 concepts.
Security Projects
A dedicated virtualized SOC engineering environment with Windows 11 endpoints, Sysmon, Splunk Enterprise, and Atomic Red Team for detection rule testing.
A passive security auditing utility that analyzes HTTP response headers, TLS posture, DNS security records, and exposed technology banners.
A browser-native threat intelligence utility that parses, deduplicates, and defangs Indicators of Compromise from unformatted text and logs.
A structured audit framework and configuration template designed to harden production WordPress sites against common exploitation paths.
Hands-on detection and investigation exercises are documented at ianjob.com/labs (training environments).
Professional Experience
- Operated and maintained websites across DNS, hosting, CDN and web server layers, including configuration, monitoring and troubleshooting.
- Analyzed web and marketing analytics data to identify trends, anomalies and performance issues, and reported findings to non-technical stakeholders.
- Built automations and repeatable workflows that reduced manual effort and improved consistency.
- Wrote clear technical documentation and guidance for varied audiences.
Professional Development
Tools & Technologies
Frameworks: MITRE ATT&CK, MITRE ATLAS, OWASP Top 10, OWASP LLM Top 10, NIST CSF, NIST AI RMF.
Operating Systems: Windows, Ubuntu, Debian, Kali Linux.
Development & Data: Python, SQL, Bash, PowerShell, TypeScript, Next.js, Git.
Target Roles
Cybersecurity Consultant (AI Security & GRC) · Security Governance & Compliance Lead · GRC Analyst · Information Security Officer · Cybersecurity Analyst · SOC Analyst · Cybersecurity Researcher · AI Risk Research Analyst · AI Safety Evaluator · Security Awareness & Training Lead · Security Data Analyst · Compliance Analyst · Threat Intelligence Research Analyst · Third-Party Risk Analyst · Vulnerability Management Analyst · Responsible AI Researcher · Incident Response Analyst · Cloud Security Analyst · Security Engineer