Hui Chung has over 8 years of experience in the tech field, working on cybersecurity transformation projects, security assessments, and web application delivery. He currently leads a development team utilizing DevSecOps practices.(A) Software Development6 years of experience in working as a back-end web developer.Software Projects Involvement:• Project Management SystemRole: A. Tech Lead, API developer, DevOps engineer (+security)• Recruitment SystemRole: Deployment & vulnerability remediation• Global Mobility Services (Tax) AutomationRole: Backend, Reporting Module• Leasing ToolRole: Lead developer• Financial Reporting System AutomationRole: PM, Lead developer (Full-stack)• Learning Management SystemRole: Backend API, software tester• Cyber Defense Portal SystemRole: Software tester• Compliance User Access Review ToolkitRole: Backend, DevOps engineer• E-commerce Website PortalRole: Solo developerTech stacks:-AWS ALB, EC2, S3, RDS (rw replica), Lambda serverless, API Gateway-AWS IAM, policy fine tuning & restrictions-GitHub webbook, Jenkin master/slave CI/CD-Nginx/Apache/IIS/XAMP-Ubuntu-WSL/CentOS/RedHat-Laravel-SPA-xdebug-Vue3-yarn-npm/bower-Django-Python3-PEP8-JavaFX & scene builder-ES6/jQuery/Bootstrap/CSS-Docker with build cache-MySQL/MSSQL/SQLite-Cipher-Redis/database queue/scheduler/worker-JIRA/Monday/ClickUp/Teams-Unit/Mock/Postman/cURL+swagger API test-Stripe(cashier+webhook)/PayPal IPN integration-RESTful-API/Sanctum/Passport(custom grant, scope with mfa)(B) Cyber Security2+ years of involvement in cyber security domainIdentity Access Management & Solutions• Office365 accounts migration with O365 groups auto provisioning• Identity & Access Manager – auto user provisioning/deprovisioning to/from AD• Compliance User Access Review and remediation on multiple platforms• CyberArk Privileged Identity Management deployment and process design• Oracle Unified Directory environment setup and proxy accounts creationArchitecture & Operations• Payment Gateway system enhancement to comply with PCI-DSS• Cyber Maturity Assessment (CMA) – Operations and technology findings and improvements• Security Incident Response and Monitoring• Hybrid environment identity management solution for corporate user authentication to google cloud education app through LDAP
-
A. Tech LeadTessereum Oct 2021 - PresentA. Backend Developer1. Build new modules using (Laravel framework) components:-accessor/mutator-globalscope-builderscope-events/observer-permission/route scope-permission middleware-localization/exception-model bloodline-eager load (sum, count)-boot function-utility/resource-softdelete/softcascade-atomic lock-cache-trait-passport scope-userstamp-laravel-auditing-model hashing-swagger api doc2. Code review & merging- Assess time-space complexity of deployed code- Assess performance of page load of deployed changes- Assess code reusability- Assess application security loopholes (middleware, whitelists & bypasses)- Daily code merging & conflict resolve (internal & third-party vendor)3. Construct reusable components- Construct/optimize (using design patterns) reusable components- Construct systemwide reusable permission validator (role & permission checking)- Refactor API endpoint to prevent exploit and overexpose of information- Construct security middleware4. Bug fixes- Bug fixes on events/observers/jobs & schedulers/logical/data accuracy issue- UAT support & bug fixesB. DevOps1. Containerization- Construct/expand/build dockerfile for subsystems & new application- Configure/optimize traffic, build time and apply docker build cache- Services/applications user key management- Build repository beta releases and release notes2. Backup & scheduler- CloudFormation ec2 time scheduler- Periodic AMI create & backup- Staging/development periodic database backup- Construct script for daily Code repository backupC. Frontend Developer- Code optimization (lazy loading and fine tuning)- API exception error message handling- Assess and create solution for reducing page time loadD. Other- Technical interview junior & senior frontend developer- Assess & feedback (code assessment) skill level of interviewee- Assign task/coach/idea sharing on technical skills- Flatten/reduce deployment hardness of tasks -
Senior AssociateKpmg Malaysia Jul 2018 - Apr 2021MalaysiaSoftware Projects-GMS Automation Developing a web-based application to maintain and automate tax computation for clients across Malaysia. (Language: Django-Python, Microsoft SQL Server)-Leasing Tool Managed and re-developed a macro enabled excel spreadsheet (MFRS 16 Leasing Tool) to Java desktop application to rectify compatibility issues and provide database security for leases while facilitate companies that do not have lease accounting software to account their lease in compliance with the new MFRS 16 standard. (Language: JavaFX platform, SQLite Cipher, JProfiler)-Financial Reporting System Managing a project which integrated with machine learning system to automates the process of financial statements review. (Language: Laravel-PHP, Redis, MySQL)-Learning Management System Conducted functional testing and writing design document, software requirement specifications and functional testing for a web-based e-learning system. (Language: Laravel-PHP, MySQL)-Cyber Defense Portal System Conducted functional testing, building API, review design document and software requirement specifications for a web-based system which provides visibility of status of vulnerabilities in all servers of one of the telco company in Malaysia. (Language: Laravel-PHP, API, MySQL)-Compliance User Access Review Toolkit Developed an automated cross-platform user access review scanning script which supports UNIX and windows. The script can automatically retrieve credentials from CyberArk and perform scanning without user intervention. (Language: Bash, Sh, PsExec, Perl)-E-commerce Website PortalConstructed an e-commerce webstore portal for E-Teaching Pen Sdn. Bhd. Utilizing jQuery responsive shopping cart. (PHP-AJAX, MySQL, PayPal IPN integration) -
AssociateKpmg Malaysia May 2016 - Jun 2018MalaysiaCyber Security- Incident Response Recovery• Performed Incident Response Recovery for a plantation company• Conducted FastTrack migration (including all user accounts, mailboxes and devices), from partial working (disaster recovered) system to Office 365- Identity Access Management (SailPoint Identity & Access Manager)• Written demo documentation and performed setup for SailPoint• Established policies and demonstration environment for automating role provisioning- Identity Access Management (User Access Review)• Performed User Access Review for Identity Access Management for a telecommunication company• Identify servers that do not comply with account security policies and performed remediation on multiple platforms (UNIX, Windows and Active Directory) to prevent privilege misuse or escalationIdentity Access Management (CyberArk Privileged Identity Management)• Deployment CyberArk PIM for a telecommunication company• Sub-component of CyberArk Privileged Identity Management includes CyberArk EPV, Privileged Session Manager, Application Identity Manager, PAS Web services SDK• On-board all servers based on predetermined batches- Oracle Unified Directory• Deployed Oracle Unified Directory (dev) for a telecommunication company• Created process of creation and management of proxy accounts to facilitate ease of access management- PCI-DSS Compliance Review• Performed PCI-DSS Compliance Review for telecommunication company• Obtain the evidence and analyze the effectiveness and efficiency on every control• Identify the gap based on the given evidence- Security Operations Centre• Performed Security Operations Centre (SOC) security monitoring services for telecommunication company• Monitors network traffics, servers and endpoints activity• Analyze security alerts generated by Carbon Black, Symantec Advanced Threat Protection (ATP) and FireEye• Immediate response to security incidents• Assist in Incident Response related activity
Hui Chung Education Details
-
Computer Science -
Computer Science
Frequently Asked Questions about Hui Chung
What company does Hui Chung work for?
Hui Chung works for Tessereum
What is Hui Chung 's role at the current company?
Hui Chung 's current role is Senior Software Engineer.
What schools did Hui Chung attend?
Hui Chung attended National Taiwan University, Inti International University & Colleges.
Not the Hui Chung you were looking for?
-
-
-
Chung Hui Yeoh
Johor Baharu -
Free Chrome Extension
Find emails, phones & company data instantly
Aero Online
Your AI prospecting assistant
Select data to include:
0 records × $0.02 per record
Download 750 million emails and 100 million phone numbers
Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.
Start your free trial