Position: Security Engineer
Category: Security
English level: fluent
Years of experience: 7

Speaker – DevOpsDays 2021
Speaker Google Developers Groups 2022
Cyber Security Malaysia 
Effective Incident Management & Active Defense Training - 2016

OSCE 
Malware Investigations - 2017

OSCE 
Python Programming for Investigators - 2017
Information Security Expert in financial institution. Responsibilities:
Working with latest cyber security methodologies & Secure DevOps practices.

Implementation and maintenance SSDLC phases (SAST/DAST, Threat Modeling, SCA , secure code review, IDE sec, Pre-commit checks etc.)

Implementing and on-boarding open-source/commercial security tools such as, SAST, DAST IAST, RASP and responsible for monitoring, rule management, false-positive elimination, new rule testing, etc.
Conduct awareness training, social engineering, carry out simulated phishing attacks, cloud security testing.

Securing containers, K8S, Micro-services, Serverless security.

Carry out regular penetration tests on web apps, mobile apps, APIs and report in detail. Provided security checklist to the dev team.

Implements security controls, risk assessment framework, and evaluates risks and develops security standards, procedures, and controls to manage risks.

Working with third-party vendors to product pilot, implement, and apply the security best practices.
Integrate security control in CI/CD and operational pipelines.