Hui Chung ‍ Email & Phone Number

A. Backend Developer1. Build new modules using (Laravel framework) components:-accessor/mutator-globalscope-builderscope-events/observer-permission/route scope-permission middleware-localization/exception-model bloodline-eager load (sum, count)-boot function-utility/resource-softdelete/softcascade-atomic lock-cache-trait-passport scope-userstamp-laravel-auditing-model hashing-swagger api doc2. Code review & merging- Assess time-space complexity of deployed code- Assess performance of page load of deployed changes- Assess code reusability- Assess application security loopholes (middleware, whitelists & bypasses)- Daily code merging & conflict resolve (internal & third-party vendor)3. Construct reusable components- Construct/optimize (using design patterns) reusable components- Construct systemwide reusable permission validator (role & permission checking)- Refactor API endpoint to prevent exploit and overexpose of information- Construct security middleware4. Bug fixes- Bug fixes on events/observers/jobs & schedulers/logical/data accuracy issue- UAT support & bug fixesB. DevOps1. Containerization- Construct/expand/build dockerfile for subsystems & new application- Configure/optimize traffic, build time and apply docker build cache- Services/applications user key management- Build repository beta releases and release notes2. Backup & scheduler- CloudFormation ec2 time scheduler- Periodic AMI create & backup- Staging/development periodic database backup- Construct script for daily Code repository backupC. Frontend Developer- Code optimization (lazy loading and fine tuning)- API exception error message handling- Assess and create solution for reducing page time loadD. Other- Technical interview junior & senior frontend developer- Assess & feedback (code assessment) skill level of interviewee- Assign task/coach/idea sharing on technical skills- Flatten/reduce deployment hardness of tasks

Malaysia

Software Projects-GMS Automation Developing a web-based application to maintain and automate tax computation for clients across Malaysia. (Language: Django-Python, Microsoft SQL Server)-Leasing Tool Managed and re-developed a macro enabled excel spreadsheet (MFRS 16 Leasing Tool) to Java desktop application to rectify compatibility issues and provide database security for leases while facilitate companies that do not have lease accounting software to account their lease in compliance with the new MFRS 16 standard. (Language: JavaFX platform, SQLite Cipher, JProfiler)-Financial Reporting System Managing a project which integrated with machine learning system to automates the process of financial statements review. (Language: Laravel-PHP, Redis, MySQL)-Learning Management System Conducted functional testing and writing design document, software requirement specifications and functional testing for a web-based e-learning system. (Language: Laravel-PHP, MySQL)-Cyber Defense Portal System Conducted functional testing, building API, review design document and software requirement specifications for a web-based system which provides visibility of status of vulnerabilities in all servers of one of the telco company in Malaysia. (Language: Laravel-PHP, API, MySQL)-Compliance User Access Review Toolkit Developed an automated cross-platform user access review scanning script which supports UNIX and windows. The script can automatically retrieve credentials from CyberArk and perform scanning without user intervention. (Language: Bash, Sh, PsExec, Perl)-E-commerce Website PortalConstructed an e-commerce webstore portal for E-Teaching Pen Sdn. Bhd. Utilizing jQuery responsive shopping cart. (PHP-AJAX, MySQL, PayPal IPN integration)

Malaysia

Cyber Security- Incident Response Recovery• Performed Incident Response Recovery for a plantation company• Conducted FastTrack migration (including all user accounts, mailboxes and devices), from partial working (disaster recovered) system to Office 365- Identity Access Management (SailPoint Identity & Access Manager)• Written demo documentation and performed setup for SailPoint• Established policies and demonstration environment for automating role provisioning- Identity Access Management (User Access Review)• Performed User Access Review for Identity Access Management for a telecommunication company• Identify servers that do not comply with account security policies and performed remediation on multiple platforms (UNIX, Windows and Active Directory) to prevent privilege misuse or escalationIdentity Access Management (CyberArk Privileged Identity Management)• Deployment CyberArk PIM for a telecommunication company• Sub-component of CyberArk Privileged Identity Management includes CyberArk EPV, Privileged Session Manager, Application Identity Manager, PAS Web services SDK• On-board all servers based on predetermined batches- Oracle Unified Directory• Deployed Oracle Unified Directory (dev) for a telecommunication company• Created process of creation and management of proxy accounts to facilitate ease of access management- PCI-DSS Compliance Review• Performed PCI-DSS Compliance Review for telecommunication company• Obtain the evidence and analyze the effectiveness and efficiency on every control• Identify the gap based on the given evidence- Security Operations Centre• Performed Security Operations Centre (SOC) security monitoring services for telecommunication company• Monitors network traffics, servers and endpoints activity• Analyze security alerts generated by Carbon Black, Symantec Advanced Threat Protection (ATP) and FireEye• Immediate response to security incidents• Assist in Incident Response related activity

Master’S Degree, Computer Science

Bachelor'S Degree, Computer Science