• Conducted penetration tests on external and internal networks/infrastructures, wireless networks, web applications, and APIs, as well as AD audits, ransomware simulations, PCI segmentation tests, and phishing campaigns.• Wrote and delivered reports presenting technical findings, executive summaries, and remediation tactics.• Consulted with clients to provide in-depth guidance and assistance for remediating vulnerabilities and misconfigurations.• Created and updated operations checklists for penetration tests based on methodologies derived from OWASP, NIST, SANS, and MITRE ATT&CK frameworks.• Learned new software, frameworks, and tools to help identify and exploit vulnerabilities.

• Reviewed and updated the client escalation policies based on the severity of risks identified in the Cyber Kill Chain.• Tested the EDR agents from multiple vendors by simulating attacks and reviewed the EDR rules to ensure faster and more accurate threat detection for daily operations.• Integrated the sandbox system with the SOAR for both automatic and manual malware analysis.

• Monitored network activities and endpoint behaviours to take mitigative actions to contain the activity and minimize damage utilizing SOAR, SIEM, EDR, NIDS, HIDS, and NGAV.• Conducted vulnerability assessment, IOC-based threat hunting, malware analysis, network traffic analysis, log analysis, and event correlation.• Produced investigation reports that include the collected and analyzed data from the sensors and Threat Intelligence to support findings in case of an incident or breach.• Received Q3 2022 Thank You recognition award.

• Diagnosed and repaired computer hardware and software while protecting the privacy and confidentiality of personal data.• Engaged with clients to provide the best support with Windows and macOS desktop environments, applications, and more.

• Consistently wrote, translated, and coded products according to specifications and best practices in C# with Unity and CI/CD in an agile environment.• Worked closely with the team to define and create interactive 3D training software.• Identified and resolved bugs efficiently and assisted in quality assurance activities.

• Completed service as Petty Officer Second Class (PO2).• Monitored, detected, prevented, blocked, and responded to cyber security risks and incidents utilizing UTM, IPS, NAC, AV, WAF, firewall, and digital forensics tools.• Managed military internet, intranets, monitoring and management servers, and web servers by troubleshooting, patching, managing passwords and configurations, and performing log backups.• Carried out and supported security awareness training, including phishing campaigns and presentations on strong passwords and password reuse.

• Managed squad members’ military leave, mental health, morale, and team expenses.• Carried out roll calls and personnel status reports.

• Managed all networking and computing devices on the ship, including satellite equipment, routers, switches, servers, workstations, network printers, and VoIP phones.• Maintained Hong Si Wook’s website on the military network.

• Served as a second battalion standard-bearer.• Completed Navy Basic Training, Firefighting, CPR, Computer Systems, Network, and Information Security courses.