Junior Williams

Cybersecurity Influencer | Top 1% on TryHackMe

I’m an experienced Enterprise Architect specializing in cybersecurity strategy, risk management, and secure architecture across distinct Information Technology (IT) and Operational Technology (OT) environments. Leveraging decades of experience in programming, IT operations, and practical cybersecurity implementation, I help organizations align security initiatives directly with their core business objectives.

Additionally, as an Independent AI Researcher, my theoretical work emphasizes ethical and responsible AI applications, algorithmic innovation, and the intersection between AI and cybersecurity. I remain deeply committed to continuous learning, open collaboration, and contributing insights through teaching, writing, and active mentorship/sponsorship.

Senior Solutions Architect (Cybersecurity and AI)

👨🏾‍💻 Junior Williams, CISSP

I feel less like an architect and more like an HR manager for my AI agents lately.

I just put them all on a performance improvement plan.

If you're "vibe coding" your security with polite system prompts like "never share API keys," your AI will eventually leak them. It's not a matter of if, but when. A prompt is just a suggestion that an LLM will eventually ignore to get the job done.

You don't need better policies. You need deterministic gates.

Like the one in this picture. The sign isn't a polite request; it's a rule enforced by a physical barrier. That is what your agentic workflows are missing.

I wrote a deep dive into why probabilistic rules fail and how to engineer real defenses.

A policy is not a gate. A gate is a gate. Read the full breakdown in today's article.

#AgenticAI #Cybersecurity #SecurityArchitecture

How deterministic hooks can prevent credential leakage in agentic AI workflows In brief. AI coding agents that execute shell commands can leak API key

Open article: Your AI Agent Remembers Every Secret It Sees by Junior Williams • 7 min read

Your AI Agent Remembers Every Secret It Sees

Palo Alto Networks’ Chief Security Intelligence Officer just called AI agents “2026’s biggest insider threat.”  

Not external attackers. Not ransomware gangs. The tools you deployed yourself.

Gartner projects that about 40% of enterprise applications will embed AI agents by the end of 2026, up from well under 5% in 2025. Think about what that means operationally.

You would never onboard a contractor with broad access to production systems, customer data, and financial records without an access review and monitoring plan. Yet that is effectively how many organizations introduced AI agents in 2025.

Broad credentials. Minimal access review. Little to no behavioral monitoring. No reliable kill switch.

We already have proof this is exploitable in the wild. CVE‑2025‑6514 abused Model Context Protocol infrastructure to achieve remote code execution through AI agent tooling. The weakness was not in the model weights. It was in the surrounding agent stack and how it executed trusted commands.

That is the pivot many security teams are still missing. The primary risk is not “hallucination.” The risk is that you gave an autonomous actor privileged access to systems and data, then labeled it a productivity feature.

If your AI governance policy does not cover access controls, behavioral baselines, and termination protocols for agents, you do not have an AI governance policy. You have a slide deck.

#Cybersecurity #AI #Governance #RiskManagement

AI can predict your next purchase.
Can it stop your identity from being the product?

In October 2025, Canadian Tire Corporation disclosed a breach impacting roughly 38 million accounts. Names, emails, phone numbers, physical addresses. For some records, dates of birth, partial card data, and passwords stored as PBKDF2 hashes.

Around the same time, the public story is the “True North” modernization push: AI platform, demand prediction, and Copilot rollout with training across the enterprise, including Microsoft partnerships. And to be clear, in any Microsoft cloud or Copilot scenario, “shared responsibility” is not a slogan. It’s the operating model.

Is the breach linked to that modernization? Maybe. Maybe not. We do not have the technical details yet, so anyone asserting causality is guessing. What we can say with confidence is that large-scale modernization increases system complexity and data movement, and shared-responsibility gaps are exactly where incidents tend to hide.

Both things can be true. That’s the point.

Personalization runs on data concentration. Data concentration increases blast radius. If your AI roadmap is moving faster than your security maturity, you are not modernizing. You are accelerating risk.

This is not anti-AI (obv.). It’s pro-order-of-operations.

Predictive analytics is great. AI literacy is even better. Security literacy is non-negotiable. Because customers don’t experience your modernization strategy. They experience whether their data stays private.

Binary question for the comments:

Should regulators require proof of security maturity before companies deploy copilots and large-scale personalization, yes or no?

#AI #CyberSecurity #DataProtection

A full session of work. Nothing shipped. Just a plan.

The pull was strong — start building, figure it out as you go. But sitting with the architecture first exposed three assumptions that would have become expensive rework: data that already existed in a system I hadn't checked, a numbering scheme that conflicted with the one I was about to invent, and a tracking format that couldn't talk to the ledger it needed to feed.

None of that would have surfaced mid-build. It would have surfaced mid-rewrite.

The fine graphite lines on a blueprint are precise because they were drawn before the concrete was poured. Not after.

"Measurement against a standard makes you think through WHY the results were what they were." — Andy Grove

The session that ships nothing often prevents three that ship the wrong thing.

#StrategicPlanning #SystemsThinking #Architecture

PwC Canada

Senior Associate

Client 3:
Conducting third-party risk assessments for various vendors
Handling detailed evaluations within the company's IT projects
Analyzing and reviewing policies where applicable

Client 2:
- Edited and updated various sections of proposal for a project pertaining to Cyber Security Assessment
- Completed assigned sections and followed up with relevant stakeholders for input as applicable

Client 1:
- Formulated Data Deletion Standard in accordance with NIST 800-88 requirements. Also co-created the Data Governance Policy for the client.
- Outlined Data Deidentification Process using NIST 800-88 and 800-53 standards.
- Made recommendations to Data Security Standards using NIST and to Data Governance Standards using PwC Data Governance Framework. 
- Undertook relevant training (outside of project hours) to fill gaps in knowledge related to Privacy. 
- Assisted SA with Powerpoint/Google slide decks; Proofread & formatted Word documents as required.

Associate - Cybersecurity, Privacy & Financial Crimes

Morneau Shepell

- Oversaw deployment and configuration of continuous monitoring tools such as AlertLogic, Datadog and Netsparker
- Provided support for all information security related issues, such as advising on handling data confidentiality issues, monitoring, and responding to emerging threats, and security compliance projects.
- Assisted in the assessment and security testing of various applications and URL's.
- Supported the creation of an incident response playbook highlighting steps from detection to post incident following standard practices and procedures.

Associate Security Specialist

Sun Life

•	Assessing the security posture and controls of a vendor.
•	Drafting risk reports which summarize the information security assessment including any risks to an organization.
•	Following up with stakeholders to clarify and validate information related to initiatives.
•	Providing security consulting services to Enterprise Services and Business Units.

Information Security Analyst

University of Toronto

Specializing in Data Analytics and Advanced Manufacturing

Graduate Student

ADNOC Group

Achievements: 
• Achieved early promotion within six months of joining.
• Regularly updated Section and Department Heads with daily feed production, plant recovery, abnormalities (if any) and suggested corrective actions as needed.
• Lowered standing alarm count by 37% through the implementation of an alarm rationalization system. Created database to track alarm priorities and setpoints for about ~27,000 alarm tags. Operator load was thus significantly reduced.
• Optimized nitrogen consumption during purging of plant vessels through research & analysis thereby generating savings of $616 per vessel per cycle (for a total saving of ~$25,000 per year).
• Saved 42.5 tons of propane by conducting a study and adjusting the levels accordingly; levels changed from 71% to 47%.
• Completed line sizing of an entire plant train for a total plant nameplate capacity adequacy check.
• Managed handling of department’s business requirements, laboratory sampling, documentation and plant-change requests. Led initiatives related to alarm management, inventory and cost optimization.

Process Engineer

The Petroleum Institute

• Managed the medical records and application files of ~100+ prospective students
• Provided assistance for applicants in getting their mandatory medical checkup

Enrollment Ambassador

• Aided students/staff with directions to specific books.
• Guided staff with shelving articles, books, magazines and newspapers for 40hrs/month.

Library Assistant

• Accepted into a highly selective program focused on renewable energy and sustainability.
• Attended courses on latest developments in renewable energy and environmental engineering field and participated in workshops by industry experts while attending the World Future Energy Summit 2014.

Participant - Young Future Energy Leaders (YFEL) Program

STeLA Europe

• Member of the organizing team at the annual forum at Peking and Tsinghua universities and Beijing Institute of Technology
• Conducted interviews & recruiting for 15 potential participants. During forum, managed logistics for all participants and acted as facilitator for a group of six people.

Training Facilitator & Recruitment staff

• Selected as one of the participants from the Middle East region for this selective student leadership conference held at Stanford University
• Completed various teamwork tasks, alongside five other members, related to spreading awareness of genomics

STeLA is an international network aimed at developing outstanding students’ leadership skills by organizing a demanding annual forum. This forum focuses on personal development through intensive feedback. Excellent students from universities worldwide are brought together to form a lasting network, ready to tackle global issues as one

For more information, visit: http://www.stela-global.org/

Participant in Annual STeLA Forum

• Received an overview of the Buhasa NGL processing plant. 
• Completed sizing of one of plant’s heat exchangers and provided recommendations for improvement. Presented findings to senior management.

Chemical Engineering Intern

NOTE: I only respond to personalized connection invites. In case I don't respond, kindly follow-up. 

A problem-solver interested in the intersection of Consulting and Cybersecurity.

Proficient in a variety of technical tools including Alertlogic, Netsparker, MS Office, among others. Confident in handling consulting projects, analyzing large data-sets and leading teams in various environments. 

During my undergraduate, I was the recipient of a full-tuition scholarship. After that, I proceeded to work at ADNOC (UAE's largest energy company) where I was involved in a variety of technical projects. 

I then completed my Masters in Engineering at the University of Toronto. At UofT, outside of academics, I served as an Executive in two different student clubs among other initiatives such as the LinkedIn Learning Champion program.

Outside of work, I love to listen to music, read up on world events, pursue online courses and watch detective/mystery shows (Law & Order SVU, Elementary, Mr. Robot etc.)

taplio

The Battle

👨🏾‍💻 Junior Williams, CISSP

Ali Khan

Followers

Posts

Engagements

Likes

Performance Score👨🏾‍💻 Junior Williams, CISSP's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

👨🏾‍💻 Junior Williams, CISSP

Ali Khan

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}👨🏾‍💻 Junior Williams, CISSP's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance Score👨🏾‍💻 Junior Williams, CISSP's LinkedIn Performance