Security & IT · Systems & Automation

Investigate problems. Improve systems.

I investigate technical evidence and design practical workflows. Explore my cybersecurity and IT labs, or my work on systems, automation, and process improvement.

Based in Kelowna, BC; seeking local roles and remote work available from British Columbia.

Portrait of Jacob Macdonnell
Jacob MacdonnellSecurity, Systems & Automation
Security & ITSystems & Automation
GCIH · GSEC · GFACTGIAC cybersecurity certificationsVerify credentials
Management (Honours)UBC · Minor in PsychologyCompleted May 2023

Selected work from both paths

One investigation and one workflow project: the problem, my contribution, and the supported result.

View all work

Network Forensics · Independent Investigation

SOC Investigation: HTTP Cookie Data Exfiltration

Reconstructed covert HTTP-cookie exfiltration from packet evidence, preserving packet order and reversing XOR/Base64 encoding with Wireshark, TShark, and AI-assisted Python.

My role Packet analysis, investigation direction, evidence validation, and documented findings; Python implementation used AI assistance.

Outcome Reconstructed exfiltrated data

Read case study

Systems & Automation · Independent Project

Media Production Toolkit: Directing AI Agents from Story to Delivery

To support repeatable video production, I designed the workflow and directed AI agents through approved inputs, media handoffs, review, and delivery. Four videos reached publication in the October 3, 2026 snapshot.

My role Requirements, workflow architecture, agent direction, review, and approvals; agents perform software and production work.

Outcome Four published films with delivery packages

Read case study

What connects the work

Understand the problem, inspect the evidence, and validate the result. These capabilities are demonstrated in different settings.

Security Operations & Incident Investigation

Alert triage, incident investigation, scope expansion, IOC enrichment, playbooks/runbooks, containment recommendations, incident reporting, MITRE ATT&CK, and PICERL in labs and course simulations.

Business Systems & Process Design

Translate operational goals into requirements, stage responsibilities, documented handoffs, and acceptance criteria. Paid media-business experience supports production and performance decisions.

Infrastructure & Telemetry Labs

Windows/Linux, Active Directory/DNS, VMware, network segmentation, Wazuh, Sysmon, and Zeek. Troubleshooting and validation are documented in the SOC infrastructure lab.

AI-Enabled Workflows & Validation

Direct AI-assisted implementation, review generated work, investigate failures, and validate delivered behavior. Independent career and media workflows are designed to support more efficient, repeatable work; the case studies distinguish intended benefit from evidenced results.

Technical curiosity. Business context.

My background combines GIAC credentials and technical labs with a Management (Honours) degree, media-business ownership, and paid freelance client work. In independent systems projects, I define requirements and architecture, direct AI-assisted implementation, and review and validate the result.

Background, skills, and education
Program statusSANS Technology InstituteApplied Cybersecurity Certificate (ACS)Paused; final course pendingCompletion: TBD
GIAC certificationsGCIH · GSEC · GFACTCredentials and education
CompetitionNational Cyber League · Spring 202594th percentile individual · 99th percentile team
Professional profileLinkedIn