uptime: 20+ years · role: security leadership · status: allergic to security theater
Security programs that work, not ones that just pass the audit.
I'm Jim Guckin. I've spent two decades leading security teams, and I write about the gap between what looks good on a dashboard and what actually protects an organization. I've been in the room when things went wrong…which is where most of the useful lessons come from.
what i do
Four hats, one job
Security Leadership
My primary focus is protecting the organization's data and systems from external and internal threats. I work closely with IT and other departments to implement and maintain strong security measures, and to educate and train employees on practices that actually stick.
Technology Mentor
I help others develop and improve their skills in the field. Whether it's answering questions, providing resources, or collaborating on projects, I try to be a useful resource for people growing their knowledge in technology.
Technology Educator
I design and deliver engaging lessons and hands-on activities that help people understand and apply key concepts in technology. In a classroom or online, the goal is the same: make it click.
Speaker & Writer
I share what I've learned through talks, writing, and my podcast. The goal is to spark honest conversations about what works in security…and to name the things that only look like they work.
latest from the blog
Recent posts
-
2026-11-12 · infosec
You Can't Simulate This
Every quarter, someone runs a phishing simulation with a slightly dodgy domain. Some people fall for it. Leadership nods if numbers go down. I have run these programs at several companies. And I have been hesitant to say what I actually think they measure.
-
2026-11-10 · infosec
Eleven Ways Past Your Vault
Ocean's Eleven is, and I don't think this was intentional, one of the best case studies in social engineering I've ever seen. Not because the technology is realistic — it isn't — but because the strategy is real. The entire crew beats the most secure vault in Las Vegas without defeating a single technical control.
-
2026-10-28 · security-leadership
Your Team Is Made of People….Lead Like It!
My brother Rob was born in October. He's not here anymore, so this month has a way of bringing him closer than the rest of the year does. Losing him changed how I see the people I work with. Not overnight, and not in some clean before-and-after way.
-
2026-10-21 · infosec
Your Vendor Just Fixed 1,400 Vulnerabilities. Now What?
I pulled up the Microsoft Security Update Guide on Patch Tuesday and saw the number: 1,411 CVEs. I closed the tab, opened it again, and counted the digits. One thousand, four hundred and eleven security vulnerabilities addressed in a single release.
testimonials --source verified-humans
What colleagues say
"I work with a lot of IT professionals and Jim ranks at the top. His ability to get to the bottom of issues and manage them until they are complete is incomparable. Jim is also a savvy negotiator who understands the value of vendor relationships, while at the same time knows what's best for his company."
"Jim is extremely knowledgeable about his field of expertise. Under his helm as Helpdesk Manager this department was run efficiently and effectively. Jim always took time to communicate to the end user and made sure he was available at all times."
"Jim made me advance my career and learn stuff on the fly, and for that I'm highly grateful. He shaped me into what I am today. Jim is a great asset to a company's IT department."
industries worked with