\documentclass[letterpaper]{article}
\usepackage[margin=0.4in,top=0.3in,bottom=0.25in]{geometry}
\usepackage{enumitem}
\usepackage{titlesec}
\usepackage[hidelinks]{hyperref}
\usepackage[T1]{fontenc}
\usepackage[scaled]{helvet}
\usepackage{xcolor}
\usepackage{microtype}

% Clean sans-serif type scale
\renewcommand{\familydefault}{\sfdefault}
\renewcommand{\normalsize}{\fontsize{9}{10.1}\selectfont}
\renewcommand{\large}{\fontsize{11.5}{12.6}\selectfont}
\renewcommand{\Large}{\fontsize{16}{17.4}\selectfont}
\renewcommand{\small}{\fontsize{8.8}{9.6}\selectfont}
\normalsize

\pagestyle{empty}
\setlength{\parindent}{0pt}
\setlength{\parskip}{0pt}

\titleformat{\section}{\fontsize{11}{12}\selectfont\bfseries\uppercase}{}{0em}{}
\titlespacing*{\section}{0pt}{6pt}{3pt}

% Bullet rhythm and hanging indent
\setlist[itemize]{nosep,leftmargin=0.3in,labelsep=0.08in,label=\textbullet,topsep=1pt,parsep=0pt,partopsep=0pt,itemsep=0.5pt,before={\parfillskip=0pt plus .2\textwidth},after={\parfillskip=0pt plus 1fil}}

% Job entry helper
\newcommand{\jobentry}[4]{%
  \textbf{#1} \hfill #2\par
  #3#4\par
}

\begin{document}

\begin{center}
  {\Large\bfseries Ashar S. Ahmed}\\[2pt]
  \href{https://linkedin.com/in/asharahmed}{LinkedIn} \textbar\
  \href{https://github.com/asharahmed}{GitHub} \textbar\
  \href{mailto:ashar@aahmed.ca}{ashar@aahmed.ca} \textbar\
  \href{tel:+16473283346}{+1 (647) 328-3346}\\[1pt]
  {\small\color[gray]{0.35}Canadian and U.S. Citizen}
\end{center}

\vspace{0pt}

\section{Summary}
\vspace{1pt}
Security operations professional with hands-on detection engineering, alert triage, and vulnerability remediation experience across hybrid on-prem and cloud environments. Led endpoint monitoring, incident response playbook development, and compliance evidence collection in a boutique healthcare practice and federal settings. Writes detection logic with SQL, regex, and query-based systems; automates security operations with Python, PowerShell, and Bash.

\section{Professional Experience}

\jobentry{Cyber Security Advisor}{Jan.\ 2023 -- Present}{Dr.\ Shariq Mumtaz Medicine Professional Corporation}{}
\begin{itemize}
  \item Built endpoint and identity monitoring workflows with structured alert triage, correlating activity across identity, endpoint, and network contexts --- reducing MTTD from days to under 1 hour
  \item Designed and tuned detection logic for anomalous access patterns using log analysis, regex-based pattern matching, and event correlation across multiple data sources
  \item Implemented MFA, FileVault, patching cadences, and MDM controls across the full endpoint fleet; maintained security baselines and audit-ready documentation for compliance reviews
  \item Authored incident response playbooks, investigation templates, and remediation tracking workflows aligned with PHIPA/PIPEDA requirements
  \item Coordinated vulnerability validation, prioritization, and closure with leadership and external IT vendors, supporting evidence collection and remediation timelines
\end{itemize}

\vspace{5pt}
\jobentry{Software Developer}{Oct.\ 2021 -- Jan.\ 2022}{Canadian Digital Service (Treasury Board of Canada Secretariat, 1-year term appointment)}{}
\begin{itemize}
  \item Engineered secure AWS infrastructure (IAM, S3, DynamoDB, CloudWatch) for Terraform/Terragrunt deployments with Checkov policy-as-code scanning
  \item Built Python/Flask bot-abuse detection controls, analyzing request patterns and tuning thresholds to reduce false positives while maintaining detection accuracy
  \item Produced security runbooks and incident-support documentation adopted org-wide, standardizing response procedures
\end{itemize}

\vspace{5pt}
\jobentry{Software Developer}{Feb.\ 2021 -- Oct.\ 2021}{Department of Industry (ISED, 1-year term appointment)}{}
\begin{itemize}
  \item Decomposed a monolithic application into service-based components, reducing incident blast radius and improving production reliability
  \item Implemented CI quality gates and automated testing, increasing code coverage from \textasciitilde20\% to 85\% and reducing production defect rates
  \item Awarded the \textbf{Directors' General Award of Merit} for critical delivery impact on national spectrum operations
\end{itemize}

\vspace{5pt}
\jobentry{Software Developer Intern (Co-op)}{Sept.\ 2020 -- Dec.\ 2020}{National Research Council of Canada (NRC)}{}
\begin{itemize}
  \item Developed full-stack Oracle Database applications powering research data pipelines across multiple NRC divisions
  \item Engineered PL/SQL stored procedures and SQL-based automation to replace manual workflows, eliminating \textasciitilde10 hrs/week of manual processing
\end{itemize}

\section{Projects \& Publications}

\textbf{QR-CLI} \textbar\ Open-Source Developer Tool \textbar\ \href{https://qr-cli.dev}{qr-cli.dev}
\begin{itemize}
  \item Built and published a cross-platform CLI tool (Node.js) generating QR codes as ASCII art with PNG export; fully offline, released under MIT license on npm/GitHub
\end{itemize}

\vspace{3pt}
\textbf{The Cyber Centre and Technologies: A Meta-Analysis} \textbar\ \textit{Accepted, Canadian Military Journal (forthcoming)}
\begin{itemize}
  \item Authored an accepted meta-analysis on the Canadian Centre for Cyber Security (Cyber Centre), synthesizing open-source sources on threat intelligence operations, detection capabilities, and critical infrastructure protection
\end{itemize}

\section{Education}

\textbf{Master of Science (M.S.) Cybersecurity \& Information Assurance} \textbar\ Western Governors University \hfill Awarded 2024\\
\textbf{Bachelor of Computer Science (BCompSci)} \textbar\ Dalhousie University \hfill Awarded 2024

\section{Certifications}
Systems Security Certified Professional (SSCP) \hfill Awarded 2023\\
AWS Certified Solutions Architect - Associate \hfill Awarded 2022\\
AWS Certified Developer - Associate \hfill Awarded 2022\\
\href{https://www.credly.com/badges/ad897688-d1c0-4b9b-9b38-dec11de968ee/public_url}{Associate of ISC2 (CISSP Exam Passed)} \hfill Awarded 2025

\section{Technical Skills}
\textbf{SecOps / Detection:} SIEM alert triage, EDR investigation, log correlation, alert tuning, detection logic (SQL, regex), incident response playbooks, threat modeling\\
\textbf{Vulnerability Mgmt:} CVE triage, vulnerability validation/prioritization, remediation coordination, evidence collection, compliance closure tracking\\
\textbf{IAM / Endpoint:} MFA, macOS/Windows hardening, FileVault, patch compliance, MDM policy enforcement, endpoint baselines, DNS filtering\\
\textbf{Cloud / IaC:} AWS (IAM, S3, DynamoDB, CloudWatch, CloudWatch Logs, CloudTrail), Azure (Defender for Cloud), Terraform, Terragrunt, Checkov, Docker, Kubernetes\\
\textbf{Scripting / Automation:} Python, PowerShell, Bash, JavaScript/TypeScript\\
\textbf{Compliance:} ISO 27001, SOC 2, PHIPA, PIPEDA, audit documentation, control evidence workflows

\end{document}
