Junior Williams

Cybersecurity Influencer | Top 1% on TryHackMe

I’m an experienced Enterprise Architect specializing in cybersecurity strategy, risk management, and secure architecture across distinct Information Technology (IT) and Operational Technology (OT) environments. Leveraging decades of experience in programming, IT operations, and practical cybersecurity implementation, I help organizations align security initiatives directly with their core business objectives.

Additionally, as an Independent AI Researcher, my theoretical work emphasizes ethical and responsible AI applications, algorithmic innovation, and the intersection between AI and cybersecurity. I remain deeply committed to continuous learning, open collaboration, and contributing insights through teaching, writing, and active mentorship/sponsorship.

Senior Solutions Architect (Cybersecurity and AI)

👨🏾‍💻 Junior Williams, CISSP

I feel less like an architect and more like an HR manager for my AI agents lately.

I just put them all on a performance improvement plan.

If you're "vibe coding" your security with polite system prompts like "never share API keys," your AI will eventually leak them. It's not a matter of if, but when. A prompt is just a suggestion that an LLM will eventually ignore to get the job done.

You don't need better policies. You need deterministic gates.

Like the one in this picture. The sign isn't a polite request; it's a rule enforced by a physical barrier. That is what your agentic workflows are missing.

I wrote a deep dive into why probabilistic rules fail and how to engineer real defenses.

A policy is not a gate. A gate is a gate. Read the full breakdown in today's article.

#AgenticAI #Cybersecurity #SecurityArchitecture

How deterministic hooks can prevent credential leakage in agentic AI workflows In brief. AI coding agents that execute shell commands can leak API key

Open article: Your AI Agent Remembers Every Secret It Sees by Junior Williams • 7 min read

Your AI Agent Remembers Every Secret It Sees

Palo Alto Networks’ Chief Security Intelligence Officer just called AI agents “2026’s biggest insider threat.”  

Not external attackers. Not ransomware gangs. The tools you deployed yourself.

Gartner projects that about 40% of enterprise applications will embed AI agents by the end of 2026, up from well under 5% in 2025. Think about what that means operationally.

You would never onboard a contractor with broad access to production systems, customer data, and financial records without an access review and monitoring plan. Yet that is effectively how many organizations introduced AI agents in 2025.

Broad credentials. Minimal access review. Little to no behavioral monitoring. No reliable kill switch.

We already have proof this is exploitable in the wild. CVE‑2025‑6514 abused Model Context Protocol infrastructure to achieve remote code execution through AI agent tooling. The weakness was not in the model weights. It was in the surrounding agent stack and how it executed trusted commands.

That is the pivot many security teams are still missing. The primary risk is not “hallucination.” The risk is that you gave an autonomous actor privileged access to systems and data, then labeled it a productivity feature.

If your AI governance policy does not cover access controls, behavioral baselines, and termination protocols for agents, you do not have an AI governance policy. You have a slide deck.

#Cybersecurity #AI #Governance #RiskManagement

AI can predict your next purchase.
Can it stop your identity from being the product?

In October 2025, Canadian Tire Corporation disclosed a breach impacting roughly 38 million accounts. Names, emails, phone numbers, physical addresses. For some records, dates of birth, partial card data, and passwords stored as PBKDF2 hashes.

Around the same time, the public story is the “True North” modernization push: AI platform, demand prediction, and Copilot rollout with training across the enterprise, including Microsoft partnerships. And to be clear, in any Microsoft cloud or Copilot scenario, “shared responsibility” is not a slogan. It’s the operating model.

Is the breach linked to that modernization? Maybe. Maybe not. We do not have the technical details yet, so anyone asserting causality is guessing. What we can say with confidence is that large-scale modernization increases system complexity and data movement, and shared-responsibility gaps are exactly where incidents tend to hide.

Both things can be true. That’s the point.

Personalization runs on data concentration. Data concentration increases blast radius. If your AI roadmap is moving faster than your security maturity, you are not modernizing. You are accelerating risk.

This is not anti-AI (obv.). It’s pro-order-of-operations.

Predictive analytics is great. AI literacy is even better. Security literacy is non-negotiable. Because customers don’t experience your modernization strategy. They experience whether their data stays private.

Binary question for the comments:

Should regulators require proof of security maturity before companies deploy copilots and large-scale personalization, yes or no?

#AI #CyberSecurity #DataProtection

A full session of work. Nothing shipped. Just a plan.

The pull was strong — start building, figure it out as you go. But sitting with the architecture first exposed three assumptions that would have become expensive rework: data that already existed in a system I hadn't checked, a numbering scheme that conflicted with the one I was about to invent, and a tracking format that couldn't talk to the ledger it needed to feed.

None of that would have surfaced mid-build. It would have surfaced mid-rewrite.

The fine graphite lines on a blueprint are precise because they were drawn before the concrete was poured. Not after.

"Measurement against a standard makes you think through WHY the results were what they were." — Andy Grove

The session that ships nothing often prevents three that ship the wrong thing.

#StrategicPlanning #SystemsThinking #Architecture

ORNA

•	Liaised with customers and managed detection and response services provider. Addressing security tickets raised by the MDR vendors with customers and performing incident triage and supporting the investigation activities. 
•	Conducted monthly internal and external vulnerability assessments using Wazuh and Nessus. Preparing and customizing vulnerability assessment reports and conducting walkthrough sessions with customers’ security and IT teams. 
•	Maintained a positive relationship between both parties and mediating conflicts and addressing customer concerns. 
•	Assisted ORNA security team in conducting cyber incident tabletop exercises (TTX), taking meeting notes, and addressing customer questions. 
•	Edited and enhanced ORNA cyber incident response playbooks for various scenarios, including ransomware, insider threat, phishing, denial of service, network IoT and generic scenarios. 
•	Worked with ORNA’s internal security team to achieve GDPR and Cyber Essentials compliance by conducting internal interviews, performing IT asset configuration changes, drafting the required compliance documentation, and collaborating with the certification team to achieve compliance. 
•	Project management support to customers during penetration testing ensuring that all goes smoothly, timelines are met, and ultimately the client gets the expected deliverables.  
•	Addressed any ad-hoc requests as required, such as conducting cyber threat intelligence and industry trends research, preparing, and issuing security notifications to customers and partners, and more. 
•	Edited penetration testing reports and preparing them for the customers. 
•	Set up video conference calls for internal and customer meetings. 
•	Proofread and edited the ORNA in-application text.   
•	Compiled and presented reports, technical and business product-related documentation.
•	Proofread, edited, and published the ORNA Blog: https://www.orna.app/blog

Manager, Special Advisory Services

•	Designed, implementing, and maintaining security protocols, policies, plans, and systems to cover all possible security threats. 
•	Virtually met with customers to discuss security measures, provide information, and explaining the designed system requirements. 
•	Compiled data and presenting reports.  
•	Proofread and edited the ORNA in-application text.   
•	Proofread, edited, and published the ORNA Blog: https://www.orna.app/blog

Jr. Cybersecurity Analyst

CBRE

•	Ensured successful competition of client and facility needs 
•	Responded to and followed up on client inquiries and concerns and ensured timely and quality customer service delivery to Ministry tenants’ satisfaction 
•	Secured boardroom bookings for client meetings and events for the building 
•	Created work orders and assigned work orders to technicians, subcontractors and vendors via Service Insight, their web-based work order system 
•	Communicated work orders to technicians and assisted in managing and resolving problems 
•	Provided reports on open and closed work orders and checks on their status with the appropriate technician or vendor 
•	Provided administrative support by preparation and updating of reports and managed property listings, PowerPoint presentations, and various other related tasks and responsibilities 
•	Administrative support duties including maintaining office and related supplies, filing, organizing office, and other related tasks

Facilities Coordinator

Infrastructure Ontario

•	Provided administrative support to the directors and their teams.  
•	Responsibilities included calendar management, managing, and resolving scheduling conflicts.  
•	Proofreading and editing Key Performance Indicators of service providers 
•	Tracked director expenses and submitted using their web application in accordance with Government of Ontario’s policy and procedures,  
•	Worked with IT department to solve issues with network connectivity and any computer issues in the office. 
•	Arranged meetings for internal and external stakeholders, organized WebEx and supplied conference call information and made sure that audiovisual and/or other equipment was available and operational, and made hospitality arrangements.  
•	Made travel arrangements, for trains and accommodation reservations, booking of rental cars.  
•	General administrative duties including maintaining office and related supplies, filing, office organization and other related tasks.

Administrative Assistant

•Responsibilities included calendar management, managing, and resolving scheduling conflicts. 
•Proofreading and editing Key Performance Indicators of service providers
•Tracked director expenses and submitted using their web application in accordance with Government of Ontario’s policy and procedures, 
•Working with IT department to solve issues with network connectivity and any computer issues in the office.
•Arranged meetings for internal and external stakeholders, organized WebEx and supplied conference call information and made sure that audiovisual and/or other equipment was available and operational, and made hospitality arrangements. 
•Made travel arrangements, for trains and accommodation reservations, booking of rental cars. 
•General administrative duties including maintaining office and related supplies, filing, office organization and other related tasks.
•Technologies: Microsoft Office Suite to prepare documents, spreadsheets, reports, and forms. document preparation, editing, and document management.

Manager. Special Advisory Services

I am passionate about cybersecurity and primarily interested in, but not limited to,  Governance, Risk and Compliance management. I have some experience in project coordination and I am currently a candidate for the ICS(2) Certified in Cybersecurity Certification. I have just completed Cybersecurity Governance Micro-credentials at Centennial College and will be start preparing for the Six Sigma White Belt soon. 
I have enrolled in the Simply Cyber GRC Analyst Master Class, by Gerald Auger, Ph.D, Simply Cyber

I have many transferable soft skills including communication, building relationships and project administration.

taplio

The Battle

👨🏾‍💻 Junior Williams, CISSP

Anne Caminer

Followers

Posts

Engagements

Likes

Performance Score👨🏾‍💻 Junior Williams, CISSP's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

👨🏾‍💻 Junior Williams, CISSP

Anne Caminer

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}👨🏾‍💻 Junior Williams, CISSP's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance Score👨🏾‍💻 Junior Williams, CISSP's LinkedIn Performance