About
Hey, I'm JD.
I work in cybersecurity. I'm the person at the cookout who ends up explaining why that text from "your bank" is a problem. Same job, bigger audience.
By day I'm a Principal SE at Arctic Wolf. I spend my time with security teams in the trenches, the ones dealing with identity sprawl, third-party risk, and an AI rollout that moved faster than anyone's playbook. That's where my material comes from. Not from press releases, from the conversations where people tell you what's actually breaking.
What I write about
Security Signal is my newsletter. A couple of times a week I take the threat reports, breach disclosures and new research, and translate them into what they mean for you. AI security is the big one right now: prompt injection, model supply chain, deepfake-driven social engineering, MITRE ATLAS. I also cover nation-state activity, identity, and the places Zero Trust falls short.
HERE'S THE THING. Most security content is either too shallow to use or too dense to finish. I aim for the middle. Plain language, real evidence, and an opinion you can push back on.
What I build
I'm a builder at heart. Native apps, automation, small SaaS products, models that try to predict Sunday football. AI changed the math on what one person can ship, and I want to know where the ceiling is.…..turns out it's a lot higher than I expected.
The blog is where that side lives. Build logs, what broke, what I learned. You can see what's on the bench right now on the projects page.
Get in touch
Want me on a panel or a podcast, or want to compare notes on something you're building? Email me atjohn@jdavies.io or find me on LinkedIn.