I am a Cloud Security Engineer with more than three years of experience securing cloud environments, operating SOC/SIEM platforms, and performing web application penetration testing. I have worked at VNPAY, a leading Vietnamese FinTech company, and Resola INC, a US-based SaaS company.
I specialize in AWS security architecture, including multi-account environments, IAM, VPC security, CloudTrail, GuardDuty, Security Hub, Config, KMS, Macie, and security governance. I build scalable security controls and automate compliance validation using Terraform, CloudFormation, Lambda, and infrastructure-as-code scanning.
I have hands-on experience in SOC operations, incident response, threat hunting, and SIEM engineering with Wazuh, Splunk, ELK Stack, OpenSearch, Sigma rules, and the MITRE ATT&CK framework. My work includes detection engineering, alert tuning, log pipeline optimization, and automated response workflows.
I am also an active vulnerability researcher and bug bounty hunter on HackerOne. I have responsibly disclosed vulnerabilities in enterprise and open-source platforms, including authorization bypass and SQL injection issues, and contributed to published GHSA/CVE security advisories.
I enjoy building security automation and AI-augmented tooling using Python, Flask, Docker, Claude AI, and security analysis tools. My projects combine cloud security, application security, machine learning-based detection, and automated vulnerability analysis.
I am motivated by solving complex security problems, improving defensive capabilities, and helping engineering teams ship secure systems. I am particularly interested in cloud security engineering, application security, vulnerability research, and security automation roles.
