Skip to main content

Alexander
North

Founder | Cybersecurity Professional | AI-Assisted Development & Governance

0
PROJECTS
0
CERTS
0
MILESTONES
0
HOURS

ABOUT

Alexander North

Solo founder and cybersecurity practitioner. My path has moved through different environments, but the constant has been building systems and understanding how they work. I design software and tools to solve real problems, then refine them through direct use. LabList started as a personal solution for tracking hands-on work and continues to evolve through that process.

I build web applications, think in systems, and treat security as foundational rather than optional. I enjoy analyzing risk and evaluating mitigations across supply chain, architecture, third-party trust boundaries, and the governance frameworks that hold them together. I'm targeting roles in GRC, AI governance, and compliance where this thinking compounds.

Always building. Always learning. Always improving.

BACKGROUND

2026Founder — Dynamiq Learning LLC | LabList.io — Built secure SaaS apps. Designed IAM, session controls, input validation, and secure third-party API data handling to meet secure coding standards.
2023Water Treatment Operator — City of Dunedin — Operated SCADA and physical equipment to meet strict water quality regulations. Ran lab tests, monitored system data, and fixed equipment to prevent downtime.
2019Water Treatment Operator — Charleston Water System — Managed chemical treatment following EPA and OSHA rules. Analyzed water samples, prepared operations reports, and trained new hires on plant safety.
2017Sergeant (E-5) — United States Marine Corps — NCO managing operational risk and personnel compliance for 3rd LAR Battalion. Audited training programs and held an active Secret security clearance.

PROJECTS

TGF — The Governance Framework for AI-Assisted Development

A Claude Code plugin that turns senior DevSecOps judgment into enforceable rules grounded in primary sources. Every rule cites a sub-rule identifier from OWASP ASVS, NIST, ISO, MITRE, or an RFC. Built for developers using AI heavily who want their work to actually meet industry standards by default.

Claude Code plugin platformHooks for enforcementMarkdown language for skillsJSONGitOWASP ASVSNIST SP 800-39NIST SP 800-53+6 more

05/04/2026ongoing

CERTS

SSCP (Associate)

ISC2

Credential ID

Hidden

Status

● Active

Issued

12/04/2025

Skills
Risk ManagementGovernanceAccess ControlIdentity and Access Management (IAM)Security OperationsIncident Response

CompTIA Security+

CompTIA

Credential ID

Hidden

Status

● Active

Issued

01/01/2025

Skills
Risk ManagementGovernanceComplianceThird-Party Risk ManagementSecurity ArchitectureZero Trust

CompTIA Network+

CompTIA

Credential ID

Hidden

Status

● Active

Issued

10/01/2024

Skills
Network ArchitectureNetwork SecurityTCP/IPDNSRouting and SwitchingWireless Networking

CompTIA Project+

CompTIA

Credential ID

Hidden

Status

● Active

Issued

03/29/2026

Skills
Project ManagementRisk ManagementStakeholder ManagementChange ControlVendor ManagementProject Lifecycle

ITIL 4 Foundation

PeopleCert

Credential ID

Hidden

Status

● Active

Issued

04/01/2025

Skills
Service ManagementIT GovernanceRisk ManagementChange ManagementIncident ManagementProblem Management

CompTIA A+

CompTIA

Credential ID

Hidden

Status

● Active

Issued

06/01/2024

Skills
Hardware TroubleshootingOperating SystemsVirtualizationChange ManagementBackup and RecoveryMalware Detection and Removal

ACTIVITY LOG

CERTCompTIA Project+

CompTIA — active

Project ManagementRisk ManagementStakeholder ManagementChange ControlVendor ManagementProject LifecycleScope ManagementCompliance ConsiderationsResource ManagementCommunication ManagementConfiguration Management
View certification →
CERTLinux Essentials

Linux Professional Institute (LPI) — active

LinuxLinux AdministrationCommand LineFile PermissionsUser and Group ManagementLinux SecurityOpen Source SoftwareLinux File SystemsLinux Networking
View certification →
CERTSSCP (Associate)

ISC2 — active

Risk ManagementGovernanceAccess ControlIdentity and Access Management (IAM)Security OperationsIncident ResponseVulnerability ManagementRisk AssessmentCryptographyCloud SecurityNetwork SecurityApplication Security
View certification →
WRITEUPBuilding a Secure Password Manager Database with MySQL

It’s been a busy semester, but it’s finally wrapped up. This semester, I earned my ITIL 4 Foundation certification and wrapped up courses in Digital Forensics and Cryptography. My biggest challenge, though, came from the two Database Management courses. At first, MySQL felt like my nemesis, but once everything started to click, I realized how powerful and even enjoyable it could be....

View full writeup →
Type

writeup

Duration

WRITEUPThe ITIL 4 Foundation Exam and How I Passed

My name is Alex, and I am a current student at Western Governors University, working on my Bachelor’s degree in Cybersecurity. I’ve been on this journey for a little over a year now. One thing I’ve learned about the industry is that cybersecurity and certifications seem to be synonymous with one another. Certifications are a great way to evaluate and demonstrate your level of knowledge on a specific topic. It provides a rewarding feeling and allows you to display your hard work for others to see....

View full writeup →
Type

writeup

Duration

CERTITIL 4 Foundation

PeopleCert — active

Service ManagementIT GovernanceRisk ManagementChange ManagementIncident ManagementProblem ManagementSupplier ManagementContinual ImprovementService Value ChainITIL 4 Guiding Principles
View certification →
WRITEUPBuild Your Own Custom Cybersecurity Lab with EVE-NG Community Edition in 2025 (Free!)

Cybersecurity is a massive field — tons of niches, each with its own tools and skills. I’m a student working toward my Cybersecurity and Information Assurance degree at Western Governors University, picking up certs like A+, Net+, and Sec+ along the way (and aiming for more!). The theory’s great, but I needed a way to get hands-on experience to really lock it in. That’s where a homelab comes in — a scalable setup that mimics a small enterprise network. After some research, I went with EVE-NG Community Edition: it’s free, flexible, and has a solid community behind it. Everything used in the guide is free and just requires your time to set up. Let’s get building!...

View full writeup →
Type

writeup

Duration

CERTCompTIA Security+

CompTIA — active

Risk ManagementGovernanceComplianceThird-Party Risk ManagementSecurity ArchitectureZero TrustIdentity and Access Management (IAM)Incident ResponseVulnerability ManagementSecurity Operations
View certification →
CERTCompTIA Network+

CompTIA — active

Network ArchitectureNetwork SecurityTCP/IPDNSRouting and SwitchingWireless NetworkingNetwork TroubleshootingVPN and Remote AccessNetwork Monitoring
View certification →
CERTCompTIA A+

CompTIA — active

Hardware TroubleshootingOperating SystemsVirtualizationChange ManagementBackup and RecoveryMalware Detection and RemovalDocumentation and Support ProcessesCommand-Line ToolsRemote Access Technologies
View certification →

CONTRIBUTIONS

JanFebMarAprMayJunJulAugSepOctNovDec
Certs
DEV
Writeups