\documentclass[letterpaper]{article}
\usepackage[margin=0.4in,top=0.3in,bottom=0.25in]{geometry}
\usepackage{enumitem}
\usepackage{titlesec}
\usepackage[hidelinks]{hyperref}
\usepackage[T1]{fontenc}
\usepackage[scaled]{helvet}
\usepackage{xcolor}
\usepackage{microtype}

% Clean sans-serif type scale
\renewcommand{\familydefault}{\sfdefault}
\renewcommand{\normalsize}{\fontsize{9.5}{11.4}\selectfont}
\renewcommand{\large}{\fontsize{11.5}{12.6}\selectfont}
\renewcommand{\Large}{\fontsize{16}{17.4}\selectfont}
\renewcommand{\small}{\fontsize{8.8}{9.6}\selectfont}
\normalsize

\pagestyle{empty}
\setlength{\parindent}{0pt}
\setlength{\parskip}{0pt}

\titleformat{\section}{\fontsize{11}{12}\selectfont\bfseries\uppercase}{}{0em}{}
\titlespacing*{\section}{0pt}{6pt}{4pt}

% Bullet rhythm and hanging indent
\setlist[itemize]{nosep,leftmargin=0.3in,labelsep=0.08in,label=\textbullet,topsep=1pt,parsep=0pt,partopsep=0pt,itemsep=3pt,before={\parfillskip=0pt plus .2\textwidth},after={\parfillskip=0pt plus 1fil}}

% Job entry helper
\newcommand{\jobentry}[3]{%
  \textbf{#1}, #2 \hfill \textbf{#3}\par
}

\begin{document}

\begin{center}
  {\Large\bfseries Ashar S. Ahmed}\\[2pt]
  Information Security Analyst \textbar\ U.S. Citizen \textbar\ \href{mailto:ashar@aahmed.org}{ashar@aahmed.org} \textbar\ \href{https://github.com/asharahmed}{GitHub}
\end{center}

\vspace{3pt}

\section{Summary}
Information security analyst with 3+ years owning day-to-day security operations, monitoring, and incident response across cloud and endpoint environments. Hands-on with CrowdStrike Falcon EDR/XDR (configuration, threat hunting, alert triage, response), AWS security services (IAM, GuardDuty, CloudTrail, Security Hub, Config), and the Microsoft 365 security suite (Defender, Purview, Intune, Secure Score). Builds AI security governance programs covering LLM risk, acceptable-use policy, and shadow-AI. Frameworks-driven (NIST CSF, ISO 27001); strong at translating technical risk into business language. CISSP, AWS-certified.

\section{Technical Skills}
\textbf{Endpoint / EDR-XDR:} CrowdStrike Falcon (administration, threat hunting, IR), Wazuh, MDM, endpoint hardening\\
\textbf{Cloud Security:} AWS (IAM, GuardDuty, Security Hub, CloudTrail, Config, VPC, S3, CloudWatch), Azure, Terraform, Checkov (policy-as-code)\\
\textbf{Microsoft 365:} Defender for Endpoint, Purview, Intune, Secure Score, Exchange Online, Conditional Access\\
\textbf{Detection / SIEM:} Log correlation pipelines, detection engineering, MITRE ATT\&CK, Prometheus/Grafana/Loki, structured logging\\
\textbf{AI Security:} LLM risk assessment, AI acceptable-use \& governance frameworks, shadow-AI, prompt injection \& data-exfiltration mitigation\\
\textbf{GRC / Risk:} NIST CSF, ISO 27001, CIS Controls v8, Zero Trust (SP 800-207), vendor \& third-party risk, vulnerability management \& remediation tracking, security awareness training\\
\textbf{Scripting:} Python, PowerShell, Bash, SQL

\section{Professional Experience}

\jobentry{Cyber Security Advisor}{Dr.\ Shariq Mumtaz Medicine Professional Corporation}{Jan.\ 2023 -- Present}
\begin{itemize}
  \item Sole security owner for a regulated healthcare practice: run day-to-day security operations, monitoring, and incident response across AWS cloud and a mixed macOS/Windows endpoint fleet
  \item Administer and optimize \textbf{CrowdStrike Falcon} EDR/XDR --- configuration, alert triage, threat hunting, and response workflows; tuned detections to cut noise and accelerate containment
  \item Secure and administer \textbf{Microsoft 365} (Defender for Endpoint, Purview, Intune, Secure Score); enforced MDM baselines and DNS/email controls that reduced spam and unsolicited traffic by \textbf{80\%}
  \item Built correlation-driven detection pipelines across identity, endpoint, and network telemetry; cut Mean Time to Detect (MTTD) from days to under \textbf{1 hour}
  \item Established an \textbf{AI acceptable-use policy and governance framework}; assessed generative-AI and copilot tools for data-handling, privacy, and shadow-AI risk
  \item Developed security policies and remediation SLAs aligned to NIST CSF / ISO 27001; ran vulnerability assessment and remediation tracking; produced KPI dashboards and metrics for leadership
\end{itemize}

\vspace{4pt}
\jobentry{Technical Contractor (AI Safety \& Evaluation)}{Mercor Intelligence, San Francisco, CA}{May 2026 -- Present}
\begin{itemize}
  \item Evaluate large language model outputs and failure modes for a frontier AI lab, including adversarial and misuse scenarios --- directly informs AI threat modeling (prompt injection, model abuse, data exfiltration)
  \item Assess model behavior for accuracy, reasoning quality, and specification adherence across technical domains
\end{itemize}

\vspace{4pt}
\jobentry{Software Developer}{Department of Industry, Canadian Digital Service}{Feb.\ 2021 -- Jan.\ 2022}
\begin{itemize}
  \item Hardened AWS infrastructure (IAM, S3, DynamoDB, CloudWatch) via Terraform/Terragrunt; enforced policy-as-code scanning with Checkov across all modules
  \item Designed passive request validation that eliminated bot-driven abuse across all form endpoints without adding user friction
  \item Implemented CI/CD security and quality gates, raising code coverage from \textasciitilde20\% to \textbf{85\%} and cutting client-reported data incidents from 4--5 to 1--2 per cycle; awarded the \textbf{Directors' General Award of Merit}
\end{itemize}

\section{Projects}

\textbf{Security Homelab \& Detection Lab} \textbar\ \href{https://github.com/asharahmed}{GitHub}
\begin{itemize}
  \item Operate a self-built SIEM/SOC lab: Wazuh detection engineering with custom decoders/rules, automated response, Authelia SSO with context-aware MFA, and Zero Trust (SP 800-207) segmentation
  \item Instrumented full observability (Prometheus, Grafana, Loki, Alertmanager) with self-healing automation; mapped controls to NIST CSF and CIS Controls v8
\end{itemize}

\section{Education}

\textbf{Master of Science (M.S.) Cybersecurity \& Information Assurance} \textbar\ Western Governors University \hfill Awarded 2024\\
\textbf{Bachelor of Computer Science (BCompSci)} \textbar\ Dalhousie University \hfill Awarded 2024

\section{Certifications}
Certified Information Systems Security Professional (CISSP) \hfill Awarded 2026\\
Systems Security Certified Professional (SSCP) \hfill Awarded 2023\\
AWS Certified Solutions Architect \& Developer - Associate \hfill Awarded 2022

\end{document}
