🛡️ ADVISORY-SBASWA-2026 · STATUS: ACTIVE
10+ years finding what others miss, then building the automation, teams, and AI-assisted tooling that make sure it doesn't happen twice. I ship code, lead Security Teams, and turn technical risk into decisions the business can act on.
CISM · CEH · Azure · AWS · Singapore
| Severity | Domain | Details |
|---|---|---|
 |
Detection Engineering & SecOps | Built detections and hunting programs that catch Threat actors |
|
Security leadership | Built teams from zero, scaled them with outcome-driven OKRs, made risk legible to the board |
 |
Security automation | Automated the SOC's busywork - Python + SOAR pipelines that cut manual triage to minutes |
 |
FDE / Developer | In-house Security tooling @ TikTok [ WAF / Endpoint-SDK / Intelligence Engine ] |
phishdomain_slack— CT-log based phishing/subdomain-takeover detector, alerts to SlackThreat_Intelligence— curated threat-intel feeds, tools & frameworksllm-alert-triage— in development
2017 Splunk Boss of the SOC — Winner
2019 DEFCON 27 Cloud Village CTF — Contributor / Crew
2023 BSides Singapore — Endpoint Forensics Workshop
2026 Building the team and the tools, at the same time