███╗ ██╗ ██████╗ ████████╗███████╗███████╗
████╗ ██║██╔═══██╗╚══██╔══╝██╔════╝██╔════╝
██╔██╗ ██║██║ ██║ ██║ █████╗ ███████╗
██║╚██╗██║██║ ██║ ██║ ██╔══╝ ╚════██║
██║ ╚████║╚██████╔╝ ██║ ███████╗███████║
╚═╝ ╚═══╝ ╚═════╝ ╚═╝ ╚══════╝╚══════╝
Long-form write-ups on security, AI, and career growth, I put them here so they're easy to link, fork, and actually use.
This started as my own notes, stuff I wrote down so I'd stop re-explaining the same thing over and over. It turned into a public pile of guides and write-ups, most of it pulled straight from running ProdSec and AppSec teams day to day, plus some AI-usage and career material that didn't fit anywhere else. Everything here is free to reuse under the license below, take what's useful, adapt it, pass it on.
Notes/
├── Security/ threat modeling library, checklists, tooling landscape
├── AI/ Claude workflows, token efficiency
├── Terms & Definitions/ glossaries and reference material
├── Career/ pathways, leveling, and career mapping
└── Misc/ everything else worth keeping
- AI Security Checklist: P0-to-P3 prioritized controls for standing up an AI security program, from governance to LLM/RAG/agent-specific safeguards.
- Security Tooling Landscape: a categorized map of the InfoSec vendor/tool landscape (GRC, SIEM, SOAR, and more).
- Threat Modeling: system design + threat model write-ups, each covering architecture, trust boundaries, DFDs, and a threat table:
- The Complete Claude Workflow Guide: subscriptions, tools, agents, MCP, and automation, covering the Claude ecosystem from beginner to expert.
- Token Efficiency Guide: a practitioner's guide to using Claude efficiently, covering what drives token/cost and how to cut waste.
- AI Terminology Reference for Software Engineering and Security: AI/ML terms for engineers and security folks, each with what problem it solves and when it's the wrong choice.
- Cloud & App Architecture Glossary: cloud and app architecture concepts (microservices, serverless, and more), what they are, why they exist, and when to skip them.
- Product Security Definitions: core product security vocabulary, scoped and framed for engineers new to the discipline.
- Software Terms to Learn: plain-language explainers for common software engineering terms, with everyday analogies.
- The Cybersecurity Career Map: real job titles across security, what they actually do, how hard each is to break into, and how many of them exist.
- AppSec-ProdSec-DevSecOps Learning Path: a practical roadmap for breaking into AppSec/ProdSec/DevSecOps, from someone who hires for it.
- Product Security Competency Pathway: what's expected at each career level, laid out dimension by dimension.
- Managing Up: what managing up actually means and why visibility matters more than people think.
- Using AI Without Outsourcing Your Thinking: why leaning on AI while you're still learning skips the struggle that actually builds understanding, and how to use it without doing that to yourself.
- Spotting AI-Generated Text: patterns and tells for identifying AI-written content, kept current as models evolve.
- LinkedIn Algorithm 2026 Guide: a deep dive into how the LinkedIn algorithm works and what changed going into 2026.
Everything in here is licensed under Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0). Short version: share it, adapt it, even sell it, just give credit and license whatever you build off it under the same terms.