Security Engineer & Leader · Northern Virginia
James Lerud
I’m a security engineer and leader in Northern Virginia with 19+ years across government, intelligence, and commercial security — from the NSA and U.S. Cyber Command to the White House SOC, threat research at Verodin (acquired by FireEye), and DevSecOps at Titania Solutions.
These days my work lives where detection engineering, security automation, and DevSecOps meet — building systems that are secure by default and treating security as a quality problem, not a gate at the end.
Selected projects
DevSecOpsKB
Go
Normalizes OWASP ZAP findings into a deduplicated, versionable knowledge base and publishes it as an Obsidian vault with dashboards and a persistent triage board. Tool-agnostic by design; ZAP is the first module.
View on GitHub →
rolescout
Python
A local-first job-match pipeline: collects ATS postings, scores them against your resume evidence, and prepares grounded application materials. Never auto-applies.
View on GitHub →
decision-log
TypeScript
A personal calibration journal — log predictions with probabilities, then score your forecasting calibration over time. Includes suggested questions and a practice mode.
View on GitHub →
All projects →