SecuringDigital Fortresses.
Specializing in comprehensive security assessments for applications and network infrastructures. I simulate real-world attacks to uncover exploitable flaws, providing clear, actionable recommendations to protect your digital ecosystem.
My Work Experience
Amplify Graduate Program - Cyber @ Deloitte
- Executed external reconnaissance, leveraging Open-Source Intelligence (OSINT) to map the organizational attack surface and proactively identify internet-exposed assets that presented risk
- Conducted web and API security assessments to identify possible attack vectors and critical vulnerabilities that may be exploited by threat actors
- Managed targeted social engineering and phishing simulations based on publicly available data, effectively measuring employee security awareness and pinpointing critical gaps in cyber hygiene training
- Supported an Active Directory security assessment, identifying policy weaknesses and leveraging misconfigurations that could lead to unauthorized access or domain compromise
Associate - Cybersecurity @ Sunway Group
- Led the development of documentation and procedures for ISO 17025 certification in software testing, ensuring compliance with industry standards and enhancing testing quality
- Spearheaded the design and execution of Tabletop Exercises to simulate cybersecurity incidents, assessing and strengthening the organization's response and recovery procedures
- Conducted thorough web application security testing and vulnerability assessments, identifying risks and recommending solutions to enhance system security for clients
- Provided first-level incident response by monitoring, analyzing, and escalating security incidents, ensuring swift mitigation and minimal impact on business operations
Intern - Vulnerability Management @ PETRONAS Digital
- Contributed in hosting Petronas's first Capture The Flag (CTF) event open to higher education institutions
- Manage vulnerabilities found in new and existing corporate assets with cloud-based security and compliance solutions
- Performed a guided wireless penetration test to detect vulnerabilities in corporate network
My Skills & Expertise
Cyber Security
My expertise in cybersecurity is built on a foundation of Web Application and Network Security, fortified by hands-on experience in comprehensive Penetration Testing. I leverage industry-leading tools like Qualys, Nessus, SecurityScorecard, and UpGuard to identify, assess, and mitigate vulnerabilities, ensuring robust protection against evolving cyber threats and strengthening your digital infrastructure.
Programming Languages
Proficient in a diverse set of programming languages, I adeptly develop solutions in Java, Python, PHP, and Go. My foundation also includes lower-level systems programming with C, complemented by specialized experience in Assembly (x86_64, Cortex-M4) for performance-critical and embedded applications.
Web Technologies
I develop comprehensive web solutions, building dynamic and responsive user interfaces with HTML, Javascript, Vue.js, and Tailwind. For robust backend services and efficient server management, I work with Node.js, Nginx, and Apache Tomcat.
Infrastructure
I build and manage resilient infrastructure with Kubernetes and Docker for orchestration, automating provisioning via Terraform and Cloud-init. My expertise includes Vagrant for development, ProxMox for virtualization, Prometheus and Grafana for monitoring, and Active Directory for system management.
My Certifications
