Open to opportunities

James Jones

@jamesjones1

Principal security systems architect delivering resilient endpoint telemetry and low-latency anomaly detection under active adversaries.

United States

Message

What I'm looking for

I’m looking to architect endpoint telemetry and anomaly-detection security systems—low-latency, state-stable, and adversary-minded—where I can ship research-grade monitoring frameworks and automation at enterprise scale.

I’m a Principal Systems & Security Architecture Engineer with 18+ years of deep expertise architecting resilient endpoint protection, high-frequency telemetry pipelines, and low-level monitoring frameworks. I combine an adversary’s mindset with a systems engineer’s discipline to secure complex execution states, reverse-engineer sophisticated binaries, and build scalable security automation.

My work centers on environment-agnostic, low-latency statistical thresholding and anomaly detection pipelines that maintain state stability under active adversarial pressure. I’ve built and co-created low-level tooling that interacts with kernel and bootloader protection mechanisms, enabling dynamic symbol resolution without relying on vulnerable signed drivers.

At Noesis Initiative, I architected real-time endpoint telemetry frameworks using Python and low-level C++ extensions, including regime deviation and spike-detection systems for enterprise-scale stability. Earlier, I co-developed DrvMon for real-time kernel-mode driver monitoring and unauthorized loading detection, founded and scaled Aria Innovations to deliver secure networking and infrastructure deployments, and led rigorous multi-OS stability-focused integration testing at IBM.

Experience

Work history, roles, and key accomplishments

Current

Lead Systems Architect

Current

Noesis Initiative (Remote)

Jan 2025 - Present (1 year 6 months)

Architected high-performance, real-time endpoint telemetry frameworks using Python and low-level C++ extensions to monitor, prevent, and isolate adversarial threat patterns at enterprise scale. Designed low-latency statistical thresholding and spike-detection systems to support massive, high-frequency streaming data under strict execution performance constraints.

Python C++Real Time Systems Anomaly Detection Regime Deviation Modeling Execution State Stability

Principal Systems Engineer

Independent Game Studio (Remote)

Jan 2020 - Jan 2022 (2 years)

Optimized low-level, high-performance C++ modules for execution state isolation, core engine runtime tuning, and memory management pipeline optimization. Built and maintained internal automation tooling and CI environments for system-level validation and build verification, and triaged core crashes, race conditions, and cross-platform OS incompatibilities using low-level memory dump triage and run

C++Performance Tuning Memory Management Automation Tools CI Environment Build Verification Pipeline Race Condition Analysis WinDbg Cross Platform OS Debugging

Owner & Operator

Aria Innovations

Jan 2010 - Jan 2021 (11 years)

Founded and scaled a technical services firm directing architecture and deployment of enterprise full-stack infrastructure, secure networking topologies, and systems administration initiatives. Managed talent acquisition and onboarding, oversaw client-facing technical operations and cross-platform deployments, and implemented operational workflows and long-term technology strategy aligned to clien

Networking Topologies Systems Administration Enterprise Deployment Talent Acquisition Onboarding Technical Mentoring Workflows Continuous Improvement technology strategy

Co-creator & Original Researcher

UPGDSED (Universal PatchGuard & DSE Disable)

Jan 2016 - Jan 2019 (3 years)

Conducted foundational research into Windows bootloader architectures, secure boot mechanics, and kernel verification patching techniques to analyze system-level protection bypasses. Co-designed and implemented a low-level utility interacting with Driver Signature Enforcement (DSE) and PatchGuard across Windows 7 through 11 using kernel and bootloader analysis on disk.

Secure Boot Driver Signature Enforcement Kernel Patch Verification Symbol Servers Reverse Engineering Dynamic Function Resolution

Co-creator

DrvMon (Advanced Driver Monitor)

Jan 2010 - Jan 2017 (7 years)

Co-developed a real-time, kernel-mode driver monitoring utility to intercept and detect unauthorized driver loading and system-level inline hooking. Built scalable client-side detection mechanics to flag anomalies in kernel execution behavior and created reverse engineering tooling to isolate and analyze hostile binaries.

Kernel Mode Driver Monitoring Unauthorized Driver Detection System Level Inline Hooking Kernel Execution Behavior Analysis Anomaly Detection Reverse Engineering

Senior Test Engineer

IBM

Jan 2000 - Jan 2005 (5 years)

Designed comprehensive software/hardware integration test strategies for enterprise server environments with a focus on low-level system stability, kernel performance, and firmware behavior. Maintained multi-OS lab testing architectures (Linux, AIX, FreeBSD) for stress testing, platform verification, and automated security validation.

Integration Testing Enterprise Server Linux FreeBSD Verification Firmware Testing Automated Security Validation