About

I am passionately in Cyber Security. 18 years’ experience in several industries (e.g. Oil and Gas, Software Development, Banking and Aviation). My expertise is Penetration Testing, Threat Hunting and Malware analysis 

1. Penetration testing for banking industry such as Core Banking, SMS Banking, Transaction Switching, Payment Gateway, Mobile Banking, Online Banking, Online trading and Various Cards Application. Segmentation Test for PCI requirement
2. Malware and exploit research and analysis for common and targeted attack of Oil & Gas and Banking Industry.
3. Security code review for Python, PHP, C#, Java and C++
4. Threat hunting in the oil & gas and banking industry environment. Analysis of several log such as WAF, Firewall, IDPS, Web Application Server, Windows/Linux security event log, Internet Proxy
5. Threat Modeling and threat use case for banking application using OWASP and PASTA framework
6. Develop security application automation with Python and C#
7. Technical team leader for CSOC managing personnel from various background such as SIEM, SOC Analyst, Network Security, Public Key Infrastructure and Software Developer.
8. Project manager for cyber security software development and Security devices deployment implementation.
9. SIEM QRadar log on boarding, CRE (Custom Rule Engine), Develop new building block and AQL. SPLUNK log index query.
10. Amazon Web Service infrastructure (EC2, Fargate, S3 Bucket, Load Balancer, Inter Region Connection and VPN tunnel with enterprise network)
11. Cyber Security Architect for energy company, Part of Changes Advisory Board, Develop various procedure, guideline, best practice, secure network design and Secure software design.
12. Depth Understanding on below
    1. Hacking and Malware Analyses Tools : Burpsuite, Acunetix, Kali Linux, IDA Pro, X64dbg, Hex Editor, Visual Studio, PyCharm, Autopsy and Vmware ESXi
    2. Firewall : Checkpoint, Palo Alto, PFSence, NGINX and F5 Web Application Firewall
    3. Proxy : Bluecoat Proxy
    4. Antivirus/EDR : Symantec, CrowdStrike, Cylance and SentinelOne