Jackagonz

Jackagonz

Information security practitioner and independent consultant

I work in security. It's not my whole personality.

I have completely undisciplined interests. Cyber and infrastructure, publishing, games, philosophy, cars, real estate. For a long time I treated that as a problem to fix. Now I think the spread is the point, as long as each piece gets taken to real depth. Breadth without depth is dabbling. Breadth with depth compounds.

The trade is information security. IT operations, SOC/NOC, and an independent consulting practice doing risk assessments and control audits. I like it. It pays for the rest of this, and it taught me the habit of mind I bring to everything else. Take the thing apart. Find out what it actually does, not what it claims to do. Write it down so someone else can follow.

This site is wider than a job title. It's the whole shape of what I'm into, and it's mine, which is the part that matters most to me. Everything I make lands here first. Other places get a copy and a link back. That's on purpose.

1Background

Lately I've been deep on agentic AI and the Model Context Protocol, the tooling that lets AI assistants call real tools and take real actions. I look at it the way I'd look at any new attack surface. Inventory it, sort it by trust zone, grant only the access a task actually needs. I don't have settled answers on where any of it is going. I find that more interesting than pretending I do.

Systems should fail loudly instead of quietly. Automation should remove a step, not hide it. Documentation nobody else can follow isn't documentation. Most problems are smaller once you write them down.

Things I believe, at least this week

2Career

  1. 2025 to present

    The Privacy Office

    Principal Information Security Consultant

    Solo practice. Risk assessments and control audits for healthcare, public sector, and small business clients, with the policies and runbooks written from scratch.

  2. 2024 to 2025

    All Connected

    Security Engineer

    Managed service provider. Ran the SOC and NOC, took the escalations, and wrote the SOPs that let the team scale.

  3. 2024

    Alexander Auto

    IT Technician, internship

    Ran Active Directory for the dealership and restructured access to least privilege. Killed a site-wide VoIP problem at the router.

  4. 2022 to 2024

    Freelance

    Independent IT Technician

    IT support for households and small businesses. Malware and ransomware cleanup, and backups that actually work.

3Selected work

Threat modeling · Agentic AI · Egress policy

Agentic AI security audit

I audited the MCP tooling wired into my own AI assistant, against the NSA's 2026 guidance on securing agentic AI. Inventoried every connected server, sorted each one by trust zone and where its data can go, then specced a deny-by-default egress model.

Finding "Available" and "active" are not the same word. Turning off capability you never use beats hardening it.

Risk assessment · Control audit · Policy and runbooks

Security controls and risk assessment

My consulting practice. Risk assessments and control audits against recognized security frameworks, for clients in healthcare, public sector, and small-to-mid-market. Leadership gets a remediation roadmap in priority order, not a findings dump. The policies, SOPs, and incident-response runbooks come with it, so the work still holds up after I'm gone.

Identity · Endpoint management · Automation

Enterprise identity and automation

Ran Active Directory and Microsoft 365 / Entra ID across multi-site, multi-tenant environments. PowerShell handles the repetitive account and config work, which is the only way least-privilege stays consistent. Doing it by hand is how it drifts.

4Approach to AI

I use AI tools in my day-to-day work and in building this site. Disclosure should be the default, not something you have to ask about.

How I use it

  • As a professional focus, not just a tool. Part of my current work is inventorying and securing the agentic AI and MCP tooling I use. I treat it the way I'd treat any new system with access to my accounts and data.
  • As a drafting and automation aid: outlining, first drafts, and repetitive scripting work. Everything published under my name, this site included, is reviewed and edited by me before it goes live. AI-assisted is not the same as AI-authored-and-unchecked.
  • Never for final decisions in my consulting work. Risk assessments, control audits, and recommendations I hand to a client are mine. AI may help me research or organize, it does not make the call.

The portrait

The image in the infobox is a generated stand-in for my face. That's deliberate, and it's worth saying plainly instead of letting you wonder. It's close enough that people who know me will place me, and it isn't a photograph anyone can scrape and match against me later.

That's a privacy and anti-deepfake call, not an aesthetic one. A labeled, high-resolution face on an indexed page is the exact input a matching service or a face-swap model wants, and once it's out there's no getting it back. Security is what I do for a living, so I hold my own footprint to the standard I'd set for a client.

I'm a real person. The work, the certifications, the degree, and the career history above are all real and all checkable.

What this means for you

  • Nothing on this site is AI-generated content published without review.
  • The portrait is the one generated image here, and it's labeled as such.
  • If you're a recruiter or collaborator and want specifics on how I use AI in a given context, ask. I'll give you a straight answer.

5Interests

Paper notebooks
Moleskine for years, and lately I've been trying to find something that beats it. Numbered pages, lay-flat binding, A4 or bigger. It's a weirdly specific hunt and I'm enjoying it.
Games, both kinds
Stardew Valley and Arc Raiders on a screen. Apocalypse World around a table. The tabletop stuff scratches a different itch, closer to writing than to playing.
How games are built
Game Maker's Toolkit, solo-dev logs, anything where somebody explains why a mechanic works instead of just showing it.
Film
A24 puts out most of what I like. Shutter Island is the one I keep going back to.
Privacy and the surveillance surface
Adjacent to the job, but I'd care anyway. What gets collected, who ends up holding it, and how little of that most people ever agreed to.
Workshops and desks
I have a long-running plan for a build with more drawers than anyone needs. Not started. Fully designed in my head.
Plants with a shape to them
Silhouette over flowers. I want something architectural in the corner of a room, not a bouquet.
Cooking, mostly meal prep
Batch it Sunday, eat well all week. Same instinct as the automation stuff, honestly.
Cars and real estate
Two long-running interests I read about far more than I currently act on.

6Education and credentials

Education
B.S. Cybersecurity and Information Assurance, Western Governors University (expected 2026)
Certifications
CompTIA PenTest+ Security+ Network+ A+ Project+
Availability
Open to remote. Southern California based.

7Contact

Roles, consulting work, or a straight answer about anything here. Hit me up as you'd like.

tints05favored@icloud.com