\documentclass[letterpaper]{article}
\usepackage[margin=0.4in,top=0.3in,bottom=0.25in]{geometry}
\usepackage{enumitem}
\usepackage{titlesec}
\usepackage[hidelinks]{hyperref}
\usepackage[T1]{fontenc}
\usepackage[scaled]{helvet}
\usepackage{xcolor}
\usepackage{microtype}

% Clean sans-serif type scale
\renewcommand{\familydefault}{\sfdefault}
\renewcommand{\normalsize}{\fontsize{9.5}{11.4}\selectfont}
\renewcommand{\large}{\fontsize{11.5}{12.6}\selectfont}
\renewcommand{\Large}{\fontsize{16}{17.4}\selectfont}
\renewcommand{\small}{\fontsize{8.8}{9.6}\selectfont}
\normalsize

\pagestyle{empty}
\setlength{\parindent}{0pt}
\setlength{\parskip}{0pt}

\titleformat{\section}{\fontsize{11}{12}\selectfont\bfseries\uppercase}{}{0em}{}
\titlespacing*{\section}{0pt}{6pt}{4pt}

% Bullet rhythm and hanging indent
\setlist[itemize]{nosep,leftmargin=0.3in,labelsep=0.08in,label=\textbullet,topsep=1pt,parsep=0pt,partopsep=0pt,itemsep=3pt,before={\parfillskip=0pt plus .2\textwidth},after={\parfillskip=0pt plus 1fil}}

% Job entry helper
\newcommand{\jobentry}[3]{%
  \textbf{#1}, #2 \hfill \textbf{#3}\par
}

\begin{document}

\begin{center}
  {\Large\bfseries Ashar S. Ahmed}\\[2pt]
  IT Security Engineer \textbar\ U.S. Citizen \textbar\ \href{mailto:ashar@aahmed.org}{ashar@aahmed.org} \textbar\ \href{https://github.com/asharahmed}{GitHub}
\end{center}

\vspace{3pt}

\section{Summary}
IT Security Engineer with a strong Windows engineering background, securing Windows platforms and endpoints in fast-moving environments. Hands-on with integrated Windows security technologies --- application control (AppLocker/WDAC), host-based firewalls, audit policy and event monitoring, and BitLocker disk encryption --- plus endpoint security and vulnerability management (CrowdStrike EDR, AV/anti-malware, vulnerability scanning, patch management). Well-versed in Windows core infrastructure (Active Directory, Entra ID, PKI), OS hardening, privileged access management, and threat TTPs. Strong PowerShell automation. CISSP, AWS-certified.

\section{Technical Skills}
\textbf{Windows Security:} OS hardening (CIS benchmarks), AppLocker/WDAC application control, Windows Defender Firewall, audit policy \& event monitoring, BitLocker disk encryption\\
\textbf{Endpoint \& Vulnerability Mgmt:} CrowdStrike Falcon EDR/XDR, antivirus/anti-malware, vulnerability scanning \& prioritized remediation, patch management\\
\textbf{Windows Infrastructure:} Active Directory (GPO, OU, hardening), Entra ID (conditional access, identity), PKI / certificate management\\
\textbf{Identity \& Access:} Privileged access management (PAM), least-privilege, MFA, Zero Trust (SP 800-207)\\
\textbf{Detection \& Threats:} SIEM (Wazuh), MITRE ATT\&CK TTPs, threat hunting, incident response\\
\textbf{Scripting / Automation:} PowerShell (primary), Python, Bash; security-as-code, intelligent workflow automation\\
\textbf{Cloud / Frameworks:} AWS (IAM, GuardDuty, CloudTrail, Config), Azure; NIST CSF, ISO 27001, CIS Controls v8

\section{Professional Experience}

\jobentry{Cyber Security Advisor}{Dr.\ Shariq Mumtaz Medicine Professional Corporation}{Jan.\ 2023 -- Present}
\begin{itemize}
  \item Secure and harden a distributed Windows (and macOS) fleet: enforced CIS-aligned baselines, AppLocker/WDAC application control, Windows Defender Firewall policy, audit logging, and BitLocker disk encryption via MDM
  \item Administer CrowdStrike Falcon EDR/XDR and AV/anti-malware; drive vulnerability scanning, prioritized remediation, and patch-management cadence across the estate
  \item Manage Windows core infrastructure and identity --- Active Directory / Entra ID access, PKI certificate issuance and renewal, and privileged access management with least-privilege
  \item Automate security workflows in \textbf{PowerShell} (and Python/Bash) for endpoint configuration, telemetry collection, and compliance reporting; standardized baselines cut unsolicited traffic by \textbf{80\%}
  \item Built SIEM detection (Wazuh) mapped to MITRE ATT\&CK TTPs across identity, endpoint, and network telemetry; cut Mean Time to Detect from days to under \textbf{1 hour} and led incident response
  \item Designed, tested, and documented strategic security controls; provided technical advice and remediation prioritization to leadership
\end{itemize}

\vspace{4pt}
\jobentry{Software Developer (DevSecOps)}{Department of Industry, Canadian Digital Service}{Feb.\ 2021 -- Jan.\ 2022}
\begin{itemize}
  \item Automated infrastructure security as code (PowerShell, Terraform/Terragrunt) with policy-as-code scanning (Checkov) across AWS; enforced auditable IAM and logging controls
  \item Implemented CI/CD security and quality gates, raising code coverage from \textasciitilde20\% to \textbf{85\%} and cutting client-reported data incidents from 4--5 to 1--2 per cycle; awarded the \textbf{Directors' General Award of Merit}
\end{itemize}

\vspace{4pt}
\jobentry{Technical Contractor (AI Safety \& Evaluation)}{Mercor Intelligence, San Francisco, CA}{May 2026 -- Present}
\begin{itemize}
  \item Investigate large language model failure modes and adversarial/misuse scenarios for a frontier AI lab --- informs threat research and detection of emerging attack techniques
\end{itemize}

\section{Projects}

\textbf{Windows Security Homelab \& Detection Lab} \textbar\ \href{https://github.com/asharahmed}{GitHub}
\begin{itemize}
  \item Operate a self-built, Windows-hosted security lab: PowerShell automation for endpoint hardening, firewall configuration, and certificate renewal; Wazuh detection engineering mapped to MITRE ATT\&CK
  \item Zero Trust (SP 800-207) segmentation, PKI/SSO with context-aware MFA, and full observability (Prometheus, Grafana, Loki) with self-healing automation; controls mapped to CIS Controls v8 / NIST CSF
\end{itemize}

\section{Education}

\textbf{Master of Science (M.S.) Cybersecurity \& Information Assurance} \textbar\ Western Governors University \hfill Awarded 2024\\
\textbf{Bachelor of Computer Science (BCompSci)} \textbar\ Dalhousie University \hfill Awarded 2024

\section{Certifications}
Certified Information Systems Security Professional (CISSP) \hfill Awarded 2026\\
Systems Security Certified Professional (SSCP) \hfill Awarded 2023\\
AWS Certified Solutions Architect \& Developer - Associate \hfill Awarded 2022

\end{document}
