Do Anh

Experience

• 

  Bkav Corp.

  Mar 2016 - Jun 2016

  Internship
• 

  Viettel Cyber Security

  Jul 2016 - Oct 2021

  Cyber Security Engineer

  + Pentest, Audit web applications + Vulnerable analyst & researching+ Web security training+ Bug Bounty hunting

• 

  SSI Securities Corporation

  Mar 2022 - now

  Cyber Security Engineer

  + Penetration Testing (Whitebox & Blackbox): Performed pentest, sourcecode auditing for numerous internal projects including web applications, mobile apps, in-house projects, API services, trading & financial services, and various other systems.+ Security Consulting and Assurance: Provided security consulting and ensured security aspects such as design, connections, source code, sensitive data controls, etc. from the early stages of projects.+ Internal Red Teaming: Conducted penetration testing from an attacker's perspective to identify vulnerabilities and assess the security posture of systems.+ Automated Vulnerability Scanning System: Built and operated processes and systems for periodic automated vulnerability scanning and testing for internal and public systems. Provided recommendations and consulted on remediation solutions for critical vulnerabilities.+ Hardening Documentation: Developed and contributed to OS and web server hardening documentation.+ Incident Response Support (BlueTeam): Analyzed logs, vulnerabilities, monitored behavior, built rules for anomaly detection, developed web shell hunting tools. Recommended mitigation solutions in case of incidents.+ Security Systems Operations: Participated in the operation of systems such as WAF, VA, SOC. Show less