\documentclass[letterpaper]{article}
\usepackage[margin=0.4in,top=0.3in,bottom=0.25in]{geometry}
\usepackage{enumitem}
\usepackage{titlesec}
\usepackage[hidelinks]{hyperref}
\usepackage[T1]{fontenc}
\usepackage[scaled]{helvet}
\usepackage{xcolor}
\usepackage{microtype}

% Clean sans-serif type scale
\renewcommand{\familydefault}{\sfdefault}
\renewcommand{\normalsize}{\fontsize{9.5}{11.4}\selectfont}
\renewcommand{\large}{\fontsize{11.5}{12.6}\selectfont}
\renewcommand{\Large}{\fontsize{16}{17.4}\selectfont}
\renewcommand{\small}{\fontsize{8.8}{9.6}\selectfont}
\normalsize

\pagestyle{empty}
\setlength{\parindent}{0pt}
\setlength{\parskip}{0pt}

\titleformat{\section}{\fontsize{11}{12}\selectfont\bfseries\uppercase}{}{0em}{}
\titlespacing*{\section}{0pt}{6pt}{4pt}

% Bullet rhythm and hanging indent
\setlist[itemize]{nosep,leftmargin=0.3in,labelsep=0.08in,label=\textbullet,topsep=1pt,parsep=0pt,partopsep=0pt,itemsep=3pt,before={\parfillskip=0pt plus .2\textwidth},after={\parfillskip=0pt plus 1fil}}

% Job entry helper
\newcommand{\jobentry}[3]{%
  \textbf{#1}, #2 \hfill \textbf{#3}\par
}

\begin{document}

\begin{center}
  {\Large\bfseries Ashar S. Ahmed}\\[2pt]
  Security Engineer \textbar\ U.S. Citizen \textbar\ \href{mailto:ashar@aahmed.org}{ashar@aahmed.org} \textbar\ \href{https://github.com/asharahmed}{GitHub}
\end{center}

\vspace{3pt}

\section{Summary}
Security engineer with 3+ years securing cloud infrastructure, containers, and CI/CD pipelines across fast-moving environments. Hands-on with cloud security (AWS, GCP), container/Kubernetes hardening, infrastructure-as-code security (Terraform/Checkov), SIEM and detection engineering (Wazuh), and DevSecOps ``security as code.'' Comfortable building security programs from the ground up --- IAM, vulnerability management, incident response, and compliance aligned to ISO 27001 / NIST CSF. AI/ML-aware, with experience assessing LLM risk and authoring AI governance. CISSP, AWS-certified.

\section{Technical Skills}
\textbf{Cloud Security:} AWS (IAM, GuardDuty, Security Hub, CloudTrail, Config, VPC, S3), GCP (IAM, org policy), Azure\\
\textbf{Containers / IaC:} Docker \& Kubernetes hardening, image scanning (Trivy), Terraform, Checkov (policy-as-code), runtime/baseline controls\\
\textbf{DevSecOps / CI-CD:} GitHub Actions security gates, dependency \& secret scanning, security-as-code automation (Python, PowerShell, Bash)\\
\textbf{Detection / SIEM:} Wazuh (custom decoders/rules), detection engineering, IDS/network telemetry, MITRE ATT\&CK, Prometheus/Grafana/Loki\\
\textbf{IAM / Zero Trust:} SSO, context-aware MFA, least-privilege access, Zero Trust (SP 800-207)\\
\textbf{Incident Response:} detection, triage, containment, remediation, post-incident review\\
\textbf{Compliance / GRC:} ISO 27001, NIST CSF, CIS Controls v8; SOC 2 \& GDPR control mapping; vendor/third-party risk, security awareness training\\
\textbf{AI / ML Security:} LLM risk assessment, AI acceptable-use \& governance, prompt injection \& data-exfiltration mitigation

\section{Professional Experience}

\jobentry{Cyber Security Advisor}{Dr.\ Shariq Mumtaz Medicine Professional Corporation}{Jan.\ 2023 -- Present}
\begin{itemize}
  \item Sole security owner for a regulated practice: run day-to-day security operations, monitoring, and incident response across AWS cloud and a mixed macOS/Windows fleet
  \item Built and tuned SIEM detection pipelines (Wazuh, custom decoders/rules) correlating identity, endpoint, and network telemetry; cut Mean Time to Detect (MTTD) from days to under \textbf{1 hour}
  \item Automated security tasks in Python/PowerShell/Bash --- endpoint hardening, patch cadence, and compliance reporting across a distributed fleet; standardized baselines cut unsolicited traffic by \textbf{80\%}
  \item Led incident response end to end (detection $\rightarrow$ containment $\rightarrow$ remediation) with post-incident reviews; managed IAM least-privilege access and remediation SLAs
  \item Established an \textbf{AI acceptable-use policy and governance framework}; assessed generative-AI and copilot tools for data-handling, privacy, and shadow-AI risk
  \item Authored security policies and KPI dashboards aligned to ISO 27001 / NIST CSF; translated technical risk into business reporting for leadership
\end{itemize}

\vspace{4pt}
\jobentry{Software Developer (DevSecOps)}{Department of Industry, Canadian Digital Service}{Feb.\ 2021 -- Jan.\ 2022}
\begin{itemize}
  \item Embedded security into CI/CD: enforced policy-as-code scanning (Checkov) across all Terraform/Terragrunt modules provisioning AWS infrastructure (IAM, S3, DynamoDB, CloudWatch)
  \item Built automated security and quality gates, raising code coverage from \textasciitilde20\% to \textbf{85\%} and cutting client-reported data incidents from 4--5 to 1--2 per cycle
  \item Designed passive request validation that eliminated bot-driven abuse across all form endpoints without adding user friction; awarded the \textbf{Directors' General Award of Merit}
\end{itemize}

\vspace{4pt}
\jobentry{Technical Contractor (AI Safety \& Evaluation)}{Mercor Intelligence, San Francisco, CA}{May 2026 -- Present}
\begin{itemize}
  \item Evaluate large language model outputs and failure modes for a frontier AI lab, including adversarial and misuse scenarios --- directly informs AI/ML threat modeling (prompt injection, model abuse, data exfiltration)
\end{itemize}

\section{Projects}

\textbf{Security Homelab \& Containerized SOC} \textbar\ \href{https://github.com/asharahmed}{GitHub}
\begin{itemize}
  \item Operate a self-built SIEM/SOC on a Dockerized, IaC-managed stack: Wazuh detection engineering with custom decoders/rules and automated response, hardened container baselines, and image scanning
  \item Zero Trust (SP 800-207) segmentation, SSO with context-aware MFA, and full observability (Prometheus, Grafana, Loki, Alertmanager) with self-healing automation; controls mapped to NIST CSF and CIS Controls v8
\end{itemize}

\section{Education}

\textbf{Master of Science (M.S.) Cybersecurity \& Information Assurance} \textbar\ Western Governors University \hfill Awarded 2024\\
\textbf{Bachelor of Computer Science (BCompSci)} \textbar\ Dalhousie University \hfill Awarded 2024

\section{Certifications}
Certified Information Systems Security Professional (CISSP) \hfill Awarded 2026\\
Systems Security Certified Professional (SSCP) \hfill Awarded 2023\\
AWS Certified Solutions Architect \& Developer - Associate \hfill Awarded 2022

\end{document}
