Jedson Jerume

IT Support & Cybersecurity Professional | Risk & Compliance Focus

About Jed

I transitioned from business administration into technology during the COVID period, beginning in IT support and progressing toward cybersecurity and cloud-focused roles. My background in business strengthens how I approach technology: structured thinking, risk awareness, and alignment with organizational objectives.

My work emphasizes security, reliability, and continuous improvement. I prioritize hands-on implementation over theory, validating skills through real-world labs involving system administration, access control, vulnerability assessment, and cloud fundamentals.

I operate with a framework-driven mindset, aligning technical decisions with industry standards such as NIST, CIS Controls, and PCI DSS. Clear documentation and effective communication are core to my approach, ensuring technical work translates into actionable insight for both technical teams and business stakeholders.

This portfolio showcases practical labs, security-focused projects, and documented workflows that reflect how I learn, build, and secure systems in real environments.

Resume Overview

IT Support and Cybersecurity professional with 6+ years of Tier 1/Tier 2 experience, a B.S. in Cybersecurity, and hands-on skills in Active Directory, identity and access management, and endpoint security.

Skill Development and Expertise

My skill set reflects hands-on experience in IT support, endpoint administration, and foundational cybersecurity practices, built across enterprise support roles, real-world security projects, and self-directed technical labs. Beyond day-to-day troubleshooting and user support, I've applied security governance frameworks like NIST, CIS Controls, and PCI DSS to client-style projects; writing security policies, assessing risk, and rating control maturity for organizations like SnowBe Online and Marconi Law Firm. I've also built hands-on experience with network design and infrastructure planning, cloud security fundamentals on AWS, and containerized applications through independent labs, rounding out a skill set that spans help desk support through security program design.

Luigi’s Case Study – Small Business IT & Security Assessment

IT and security assessment for a small business, with practical, cost-effective recommendations to reduce risk.

Marconi Law Firm – Network System Implementation Project

Designed and implemented a complete small-business network for a law firm, from server setup to VoIP.

SnowBe Online – Cybersecurity Maturity Policy Development

Cybersecurity maturity policy for an e-commerce organization, defining a path for continuous security improvement.

SnowBe Online Security Plan

Comprehensive IT security plan for a growing e-commerce organization, defining policies, roles, and procedures.

SnowBe Online Software Patch Management Policy

Formal patch management policy to reduce vulnerability risk across cloud, endpoint, and POS systems.

SnowBe Online Change Control Management Policy

Formal change control policy ensuring system and application changes are reviewed, approved, and implemented safely.

SnowBe Online Security Control Ratings & Maturity AssessmenT

Rated SnowBe's security domains against CIS-style control categories to identify gaps and prioritize fixes.

Docker Compose and Applications

In this activity I will show : How to download a docker-compose file and bring up the stack. How to run a web application from a container. What I practiced: container orchestration basics, spinning up multi-service stacks with Docker Compose, and running a web application from a container — foundational skills for securing containerized infrastructure.

Download

Marconi Law – IT & Security Architecture Case Study

Designed and documented a secure, NIST-aligned IT and network architecture for a law firm, including risk assessment, network segmentation, and security control mapping to protect sensitive legal data. What I practiced: applying NIST-aligned network segmentation and risk assessment to a real small-business scenario, and translating architecture decisions into documented security controls.