The Sec Guy

About The Sec Guy

Learn security from someone who has done it for 12 years.

The Sec Guy is run by a cloud and AI security architect who has spent over a decade securing large multi-cloud environments: building posture programs, shifting security into infrastructure code, and now securing AI agents and automation. The goal is simple: take what usually takes years to learn on the job and teach it to you in five-minute lessons you can apply the same day.

Experience across Global agribusiness · Big Four consulting · Adtech at scale · Retail · Wealth and fintech · Global IT services

The mission: every engineer, a security engineer.

Attackers don't wait for the security team. Every misconfigured bucket, over-privileged role and unguarded AI agent was created by someone who was never taught what to look for. The Sec Guy exists to close that gap: to give everyone who builds or defends cloud and AI systems the instincts of a senior security architect.

What you will master

Three disciplines. One way of thinking.

Cloud security

Find the gaps before attackers do

Most cloud breaches are not clever zero-days. They are misconfigurations: a public bucket, an over-privileged role, a leaked key, a forgotten test account. You will learn to spot them, exploit them safely in a lab, and close them for good.

  • Storage exposure across S3, Azure Blob and OCI Object Storage
  • Identity and access: roles, policies, keys and real least privilege
  • Network, CDN and DNS exposure, including subdomain takeover
  • Posture management (CSPM/CNAPP): reading findings and fixing what matters first
  • Infrastructure as code security: catching risky Terraform before it ships

AI security

Secure the systems that now act on their own

Copilots, chatbots and AI agents are being wired into company data and cloud accounts faster than anyone is securing them. That makes AI the fastest-growing attack surface, and the one where skilled defenders are rarest.

  • Prompt injection and jailbreaks, direct and hidden inside documents and web pages
  • Data leakage through RAG apps, copilots and conversation history
  • Agent security: tool permissions, MCP servers, plugins and blast radius
  • AI supply chain: models, datasets and third-party integrations
  • Mapping AI risk to the OWASP Top 10 for LLM applications and real controls

Security architecture

Design it secure from the first diagram

Fixing issues one at a time never ends. Great architects remove entire classes of problems. You will learn how senior architects think: in trust boundaries, guardrails and automation, not checklists.

  • Threat modelling cloud and AI systems, step by step
  • Secure landing zones and multi-account or multi-subscription guardrails
  • Shift-left security: policy as code and secure CI/CD pipelines
  • Zero trust and identity-first design
  • Automated detect, triage and remediate workflows, including AI-assisted ones

How every lesson works

Break it. Explain it. Fix it. Prevent it.

  1. 1

    Break it

    See the mistake exactly as an attacker would, in a safe demo lab.

  2. 2

    Explain it

    Understand why it happens, in plain language, with no jargon left undefined.

  3. 3

    Fix it

    Get the precise fix: the setting, the policy, the line of code.

  4. 4

    Prevent it

    Learn the guardrail that stops it coming back across every account and team.

Learning paths

Start where you are. Grow into an architect.

Level 1 · Foundations

Developers, IT and SOC analysts moving into cloud and AI security

Understand how cloud and AI systems really get breached, and run the free checklists on your own environment with confidence.

Level 2 · Practitioner

Cloud, DevOps and security engineers who own real environments

Find and fix misconfigurations fast, prioritise posture findings, secure pipelines and harden AI features before launch.

Level 3 · Architect

Senior engineers, architects and security leads

Design secure-by-default platforms, threat model AI agents, and build guardrails and automation that scale across teams.

Who it's for

Built for people who build and defend.

  • Cloud and DevOps engineers
  • Security analysts and SOC teams
  • Developers building AI features
  • Security and cloud architects
  • Security leaders and CISOs who want the real picture
  • Students preparing for a career in security

Practical, not hype

No fear-selling and no vague "best practices". Every lesson ends with something you can check in your own environment today.

Built in demo labs

Every example is built in dedicated demo accounts. Nothing comes from any employer or client environment.

Independent

Opinions are my own. If a video is ever sponsored, it will say so clearly at the start.

For teams

Want this expertise inside your team?

Cloud posture reviews, AI and agent threat modelling, secure-by-design architecture and hands-on team training, for companies in the US, Europe and Australia.

Work with me →

[email protected]