Hi, I’m James Lee — a security engineer based in Singapore with more than 20 years of experience in cybersecurity.

Over the years, I’ve worked across a wide range of security domains, from network and access security to application protection. Today, much of my focus is on securing AI applications and infrastructure, while still working hands-on with the security technologies that surround them.

What I work on

  • AI Security: prompt injection, jailbreaks, guardrails, AI runtime firewalls, and agent/MCP security
  • Application Security: WAF, API security, and bot defense
  • Identity & Access: OAuth 2.0, OpenID Connect (OIDC), and SAML-based authentication and federation
  • Network & Secure Access: Secure Web Gateways (SWG) and VPN
  • Threat Defense: malware based attacks detection and protection

What I write about

Most posts here focus on AI security, but I also write about application security and the broader cybersecurity topics above. Many of them come from experiments in my own lab: I like to break things first, then work out how to defend them.

Connect

I work at F5. The views and opinions expressed here are my own and do not represent those of my employer.