%-------------------------
% Curriculum Vitae in LaTeX
% Based on Jake's Resume template (Jake Gutierrez), MIT License
% Expanded two-page CV variant of RESUME_CA_V2_US
%-------------------------

\documentclass[letterpaper,10pt]{article}

\usepackage{latexsym}
\usepackage[empty]{fullpage}
\usepackage{titlesec}
\usepackage{marvosym}
\usepackage[usenames,dvipsnames]{color}
\usepackage{verbatim}
\usepackage{enumitem}
\usepackage[hidelinks]{hyperref}
\usepackage{fancyhdr}
\usepackage[english]{babel}
\usepackage{tabularx}
\usepackage[T1]{fontenc}
\usepackage{lmodern}
\usepackage{microtype}
\input{glyphtounicode}

\pagestyle{fancy}
\fancyhf{}
\fancyfoot[C]{\small\thepage}
\renewcommand{\headrulewidth}{0pt}
\renewcommand{\footrulewidth}{0pt}
\setlength{\footskip}{14pt}

% Adjust margins
\addtolength{\oddsidemargin}{-0.55in}
\addtolength{\evensidemargin}{-0.55in}
\addtolength{\textwidth}{1.1in}
\addtolength{\topmargin}{-0.85in}
\addtolength{\textheight}{1.8in}

\urlstyle{same}

\raggedbottom
\raggedright
\setlength{\tabcolsep}{0in}

% Section formatting
\titleformat{\section}{
  \vspace{-9pt}\raggedright\large\bfseries
}{}{0em}{}[\color{black}\titlerule \vspace{-6pt}]

% Ensure that generated pdf is machine readable/ATS parsable
\pdfgentounicode=1

%-------------------------
% Custom commands
\newcommand{\resumeItem}[1]{
  \item\small{
    {#1 \vspace{-2pt}}
  }
}

\newcommand{\resumeSubheading}[4]{
  \vspace{1pt}\item
    \begin{tabular*}{0.97\textwidth}[t]{l@{\extracolsep{\fill}}r}
      \textbf{#1} & #2 \\
      \textit{\small#3} & \textit{\small #4} \\
    \end{tabular*}\vspace{-3pt}
}

\newcommand{\resumeProjectHeading}[2]{
    \vspace{1pt}\item
    \begin{tabular*}{0.97\textwidth}{l@{\extracolsep{\fill}}r}
      \small#1 & #2 \\
    \end{tabular*}\vspace{-3pt}
}

\renewcommand\labelitemii{$\vcenter{\hbox{\tiny$\bullet$}}$}

\newcommand{\resumeSubHeadingListStart}{\begin{itemize}[leftmargin=0.15in, label={}]}
\newcommand{\resumeSubHeadingListEnd}{\end{itemize}}
\newcommand{\resumeItemListStart}{\begin{itemize}[itemsep=0pt,topsep=2pt]}
\newcommand{\resumeItemListEnd}{\end{itemize}\vspace{-6pt}}

%-------------------------------------------
%%%%%%  CV STARTS HERE  %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\begin{document}

%----------HEADING----------
\begin{center}
    {\Huge \scshape Ashar S. Ahmed} \\ \vspace{3pt}
    \small Security Engineer, Detection \& Cloud Security $|$ CISSP $|$ Canadian \& U.S. Citizen \\ \vspace{2pt}
    \small
    \href{mailto:ashar@aahmed.ca}{\underline{ashar@aahmed.ca}} $|$
    \href{https://github.com/asharahmed}{\underline{github.com/asharahmed}} $|$
    \href{https://linkedin.com/in/asharsahmed}{\underline{linkedin.com/in/asharsahmed}}
\end{center}

%-----------SUMMARY-----------
\section{Profile}
\begin{itemize}[leftmargin=0.15in, label={}]
  \small{\item{
    Security engineer (CISSP) in detection engineering, cloud security, and vulnerability management, with a software-development background spanning Terraform-managed AWS, SIEM/EDR detection logic, and full-stack and iOS applications. Built and run the security and privacy program for a PHIPA-regulated medical practice, and delivered secure, policy-as-code AWS infrastructure for the Government of Canada.
  }}
\end{itemize}
\vspace{-11pt}

%-----------TECHNICAL SKILLS-----------
\section{Technical Skills}
\begin{itemize}[leftmargin=0.15in, label={}]
  \small{\item{
    \textbf{Security Operations / Detection}{: SIEM alert triage (Wazuh), EDR/DFIR investigation, log correlation, alert tuning, detection logic (SQL, regex), MITRE ATT\&CK mapping, IR playbooks, threat modeling} \\ \vspace{1pt}
    \textbf{Vulnerability Management}{: CVE triage, validation/prioritization, scanner integration (Snyk, Trivy, Dependabot), remediation coordination, evidence collection, compliance tracking} \\ \vspace{1pt}
    \textbf{IAM / Endpoint Security}{: MFA, macOS/Windows hardening, FileVault, patch compliance, MDM policy enforcement, DNS filtering} \\ \vspace{1pt}
    \textbf{Cloud / IaC}{: AWS (IAM, S3, DynamoDB, CloudWatch, CloudTrail), Azure (Defender for Cloud), Terraform, Terragrunt, Checkov, Docker, Kubernetes} \\ \vspace{1pt}
    \textbf{Scripting / Automation}{: Python, PowerShell, Bash, JavaScript/TypeScript} \\ \vspace{1pt}
    \textbf{Languages / Frameworks}{: C\#, .NET, Blazor, Node.js, Swift/SwiftUI, SQL, PL/SQL} \\ \vspace{1pt}
    \textbf{AI / LLM}{: LLM application development (Claude/OpenAI APIs), prompt engineering, agentic automation, LLM/prompt-injection security} \\ \vspace{1pt}
    \textbf{Compliance}{: NIST CSF, ISO 27001-aligned controls, PHIPA-oriented controls, audit documentation, control evidence workflows}
  }}
\end{itemize}
\vspace{-11pt}

%-----------EXPERIENCE-----------
\section{Professional Experience}
  \resumeSubHeadingListStart

    \resumeSubheading
      {Cyber Security Advisor}{Jan. 2023 - Present}
      {Dr. Shariq Mumtaz Medicine Professional Corporation (PHIPA-regulated medical practice)}{}
      \resumeItemListStart
        \resumeItem{\textbf{Built and run the full security \& privacy program} for a PHIPA-regulated medical practice (risk register, remediation SLAs, prioritized roadmap, and KPI reporting)}
        \resumeItem{Centralized identity, endpoint, and network logging where none existed and built alerting on anomalous access and sign-ins, cutting \textbf{mean-time-to-detect from days to under an hour}}
        \resumeItem{Authored custom \textbf{Wazuh} decoders and \textbf{MITRE ATT\&CK}-mapped rules (T1110 brute force, T1595 scanning, T1078 valid accounts) for log sources Wazuh can't parse natively, correlating repeated auth failures into credential-stuffing alerts that fired on real attempts against internet-exposed services}
        \resumeItem{Standardized all \textbf{9 managed endpoints} on \textbf{MFA, full-disk encryption (FileVault/BitLocker), EDR, DNS filtering, and enforced patching}, reaching \textbf{100\% policy compliance} with zero unmanaged devices}
        \resumeItem{Scripted automation in Python, PowerShell, and Bash for endpoint configuration, telemetry collection, and compliance reporting across the macOS/Windows fleet; cut unsolicited inbound traffic (firewall-blocked connections, malicious DNS queries, and spam) by \textbf{80\%}}
        \resumeItem{Implemented and \textbf{restore-tested 3-2-1 backups} to cut ransomware recovery risk; authored PHIPA-aligned policies, a breach-response plan, and audit evidence, and ran security reviews of EMR/IT vendors handling PHI}
      \resumeItemListEnd

    \resumeSubheading
      {Technical Contractor (AI / LLM Security Evaluation)}{May 2026 - Present}
      {Mercor Intelligence, San Francisco, CA (Remote)}{}
      \resumeItemListStart
        \resumeItem{Evaluate large language model outputs for technical correctness and for security/safety failures such as prompt injection and unsafe tool use; deliver structured feedback used in model training}
      \resumeItemListEnd

    %---- Government of Canada: one employer, two assignments ----
    \item
      \begin{tabular*}{0.97\textwidth}[t]{l@{\extracolsep{\fill}}r}
        \textbf{Software Developer, Government of Canada} & Feb. 2021 - Jan. 2022 \\
      \end{tabular*}\vspace{-3pt}

      % Assignment 1: ISED
      \item
        \begin{tabular*}{0.97\textwidth}[t]{l@{\extracolsep{\fill}}r}
          \textit{\small Innovation, Science \& Economic Development Canada (ISED)} & \textit{\small Feb. - Oct. 2021} \\
        \end{tabular*}\vspace{-3pt}
        \resumeItemListStart
          \resumeItem{Designed passive request validation that eliminated bot-driven abuse on public form endpoints without adding user friction, while increasing detection coverage}
          \resumeItem{Produced security runbooks adopted org-wide across delivery teams}
          \resumeItem{Awarded the \textbf{Directors' General Award of Merit} for delivery impact on national spectrum operations}
        \resumeItemListEnd

      % Assignment 2: CDS
      \item
        \begin{tabular*}{0.97\textwidth}[t]{l@{\extracolsep{\fill}}r}
          \hspace{0.15in}\textit{\small Canadian Digital Service (CDS)} & \textit{\small Oct. 2021 - Jan. 2022} \\
        \end{tabular*}\vspace{-3pt}
        \resumeItemListStart
          \resumeItem{Engineered secure AWS infrastructure (IAM, S3, DynamoDB, CloudWatch) via Terraform/Terragrunt; enforced policy-as-code scanning with Checkov across all modules}
          \resumeItem{Extended the passive anti-abuse validation across the platform's form endpoints, sustaining low-friction protection and detection coverage}
          \resumeItem{Added automated testing and CI/CD checks, raising code coverage from \textasciitilde20\% to \textbf{85\%}; reduced client-reported data incidents from 4-5 to 1-2 per cycle}
        \resumeItemListEnd

    \resumeSubheading
      {Software Developer Intern}{Sept. 2020 - Dec. 2020}
      {National Research Council of Canada (NRC)}{}
      \resumeItemListStart
        \resumeItem{Developed full-stack Oracle Database applications powering research data pipelines across multiple NRC divisions}
        \resumeItem{Engineered PL/SQL stored procedures and SQL-based automation to replace manual workflows, eliminating \textasciitilde10 hrs/week of manual processing}
      \resumeItemListEnd

  \resumeSubHeadingListEnd
\vspace{-9pt}

%-----------PROJECTS-----------
\section{Projects \& Publications}
    \resumeSubHeadingListStart

      \resumeProjectHeading
          {\textbf{Ravelin: Vulnerability SLA \& Compliance Tracker}}{\href{https://getravelin.xyz/}{\underline{getravelin.xyz}}}
          \resumeItemListStart
            \resumeItem{Built a vendor-neutral platform that ingests findings from Dependabot, Snyk, and Trivy, assigns severity-based remediation SLAs, and tracks breaches with full history and compliance reporting}
            \resumeItem{\emph{Stack:} C\#, .NET 10, Blazor, Azure, Azure DevOps, Docker, Terraform, SQL Server}
          \resumeItemListEnd

      \resumeProjectHeading
          {\textbf{QR-CLI} $|$ \emph{TypeScript, Node.js, Commander, qrcode}}{\href{https://qr-cli.dev/}{\underline{qr-cli.dev}}}
          \resumeItemListStart
            \resumeItem{Built and published a cross-platform CLI that generates QR codes as ASCII art with PNG export, works fully offline, released under MIT on npm and GitHub}
          \resumeItemListEnd

      \resumeProjectHeading
          {\textbf{Tally Habit Tracker} $|$ \emph{Swift/SwiftUI, SwiftData, WidgetKit, CloudKit}}{\href{https://tally.aahmed.ca/}{\underline{tally.aahmed.ca}}}
          \resumeItemListStart
            \resumeItem{Built and published a privacy-first iOS habit tracker with three habit types, flexible scheduling, streak heatmaps, Live Activities, inline notification actions, and Google Reminders import; zero telemetry, no third-party SDKs}
          \resumeItemListEnd

      \resumeProjectHeading
          {\textbf{The Cyber Centre and Technologies: A Meta-Analysis} $|$ \emph{Accepted, Canadian Military Journal (forthcoming)}}{}
          \resumeItemListStart
            \resumeItem{Authored an accepted meta-analysis on the Canadian Centre for Cyber Security, reviewing open-source literature on how it runs threat intelligence and protects critical infrastructure}
          \resumeItemListEnd

    \resumeSubHeadingListEnd
\vspace{-9pt}

%-----------EDUCATION-----------
\section{Education}
  \resumeSubHeadingListStart
    \resumeSubheading
      {Western Governors University}{Awarded 2024}
      {Master of Science (M.S.), Cybersecurity \& Information Assurance}{}
    \resumeSubheading
      {Dalhousie University}{2018 - 2024}
      {Bachelor of Computer Science (BCompSci)}{}
  \resumeSubHeadingListEnd
\vspace{-9pt}

%-----------CERTIFICATIONS-----------
\section{Certifications}
\begin{itemize}[leftmargin=0.15in, label={}]
  \small{\item{
    Certified Information Systems Security Professional (CISSP), 2026 $|$ Systems Security Certified Professional (SSCP), 2023 $|$ AWS Certified Solutions Architect \& Developer - Associate, 2022
  }}
\end{itemize}

\end{document}
