uptime: 20+ years · role: security leadership · status: allergic to security theater
Security programs that work, not ones that just pass the audit.
I'm Jim Guckin. I've spent two decades leading security teams, and I write about the gap between what looks good on a dashboard and what actually protects an organization. I've been in the room when things went wrong…which is where most of the useful lessons come from.
what i do
Four hats, one job
Security Leadership
My primary focus is protecting the organization's data and systems from external and internal threats. I work closely with IT and other departments to implement and maintain strong security measures, and to educate and train employees on practices that actually stick.
Technology Mentor
I help others develop and improve their skills in the field. Whether it's answering questions, providing resources, or collaborating on projects, I try to be a useful resource for people growing their knowledge in technology.
Technology Educator
I design and deliver engaging lessons and hands-on activities that help people understand and apply key concepts in technology. In a classroom or online, the goal is the same: make it click.
Speaker & Writer
I share what I've learned through talks, writing, and my podcast. The goal is to spark honest conversations about what works in security…and to name the things that only look like they work.
latest from the blog
Recent posts
-
2026-11-10 · infosec
Eleven Ways Past Your Vault
Ocean's Eleven is, and I don't think this was intentional, one of the best case studies in social engineering I've ever seen. Not because the technology is realistic — it isn't — but because the strategy is real. The entire crew beats the most secure vault in Las Vegas without defeating a single technical control.
-
2026-10-28 · security-leadership
Your Team Is Made of People….Lead Like It!
My brother Rob was born in October. He's not here anymore, so this month has a way of bringing him closer than the rest of the year does. Losing him changed how I see the people I work with. Not overnight, and not in some clean before-and-after way.
-
2026-10-21 · infosec
Your Vendor Just Fixed 1,400 Vulnerabilities. Now What?
I pulled up the Microsoft Security Update Guide on Patch Tuesday and saw the number: 1,411 CVEs. I closed the tab, opened it again, and counted the digits. One thousand, four hundred and eleven security vulnerabilities addressed in a single release.
-
2026-10-14 · infosec
How AI Helps Security Analysts Without Replacing Their Judgment
At 9:30 on a Tuesday night, I was reviewing a vendor's SOC 2 Type II report and my ability to absorb another paragraph of auditor dialect was approaching zero. I gave an AI tool the relevant sections. In three minutes, it flagged two things I'd missed. I still owned the decision.
testimonials --source verified-humans
What colleagues say
"I work with a lot of IT professionals and Jim ranks at the top. His ability to get to the bottom of issues and manage them until they are complete is incomparable. Jim is also a savvy negotiator who understands the value of vendor relationships, while at the same time knows what's best for his company."
"Jim is extremely knowledgeable about his field of expertise. Under his helm as Helpdesk Manager this department was run efficiently and effectively. Jim always took time to communicate to the end user and made sure he was available at all times."
"Jim made me advance my career and learn stuff on the fly, and for that I'm highly grateful. He shaped me into what I am today. Jim is a great asset to a company's IT department."
industries worked with