Writing Samples
Published cybersecurity writing
Articles for security vendors, technical publishers, and security leaders. Bylined work links to the live article.
Bylined articles
The linked samples below are StationX articles. Additional bylined work has appeared on How-To Geek.
Cyber Kill Chain vs. MITRE ATT&CK
A comparative piece explaining two major security frameworks and how they differ in structure, use, and defensive value.
Metasploit Tutorial
A hands-on technical guide covering how one of cybersecurity's best-known frameworks is used in practical testing workflows.
ChatGPT for Cyber Security
A piece exploring how AI can be applied in cybersecurity contexts, including practical use cases and broader security implications.
Are Password Managers Really That Secure?
Examines password manager security, including the tradeoffs of keeping vault data in the cloud.
9 Threats a Strong Password Still Doesn’t Protect Against
Explores threats that can still compromise accounts even when someone uses a strong password.
Cyber Hygiene 101: Simple Habits for a Safer Digital Life
Covers everyday habits that can help reduce exposure to common online risks.
Ghostwritten thought leadership (anonymized)
Selected excerpts from thought leadership articles written for security leaders. Client names are withheld.
Compliance as operational discipline
Shows how regulatory requirements can reinforce durable security operations.
For many organizations, cybersecurity regulation becomes a scramble only when deadlines, audits, or enforcement actions start getting close. That usually leads to narrow fixes instead of durable security improvements. A stronger approach is to treat regulation as a framework for better operational discipline. Risk assessments, access controls, incident response planning, and leadership oversight all become more useful when they are built into everyday security decisions. Compliance then stops being a separate exercise and starts reinforcing resilience, accountability, and readiness over time.
Connecting governance, risk, and compliance
Connects governance, risk, and compliance to one security strategy.
Governance, risk, and compliance are often discussed like separate responsibilities, but they are most effective when they support the same security strategy. Governance defines direction and accountability. Risk management helps teams identify where exposure is growing and what needs attention first. Compliance turns both into repeatable practice by aligning controls, policies, and reporting expectations. When those pieces work together, security stops operating as a collection of disconnected tasks and starts giving the business a clearer view of posture, priorities, and decision-making.
Making security useful to the business
Connects security expertise to clear business decisions and trust.
Security leaders rarely struggle because they lack controls on paper. The harder problem is turning security into a function the business can actually understand, support, and prioritize. That takes more than technical accuracy. It takes judgment, clear communication, and the ability to connect risk to real business decisions. Strong external security writing does the same thing. It translates expertise into language that builds trust, sharpens authority, and makes complex issues easier for non-specialists to understand without flattening the substance behind them.