Skip to content

Professional work

Professional experience

Penetration testing, red teaming, security operations, and risk reporting across professional roles and training.

Scope of work

Security work, with client details kept private.

These descriptions focus on responsibilities, methods, and outcomes. Client identities and sensitive assessment details are not published here.

01 · Professional role

May 2024 - Present

HybridFull-time

Cybersecurity and Privacy Associate

PwC Philippines

Makati, National Capital Region, Philippines

  • Managed concurrent VAPT, Red Teaming, and GRC engagements covering penetration testing, SOC 2, policy development, and CIS Controls v8.
  • Identified critical web and infrastructure vulnerabilities, including authentication bypass, exposed administrative access, and sensitive data exposure.
  • Conducted vulnerability assessments across 100+ endpoints and authorized internal threat simulations using Atomic Red Team and Sliver C2.
  • Evaluated endpoint, boot, encryption, and USB security controls, identifying gaps in detection, prevention, and hardening.
  • Authored technical findings, presented results to stakeholders, recommended remediation, and validated fixes through retesting.

02 · Professional role

Nov 2023 - Feb 2024

RemoteInternship

Junior Security Analyst

Insightz Technology

Singapore, Singapore

  • Triaged and investigated Microsoft Entra ID account alerts using an enterprise XDR platform, identifying suspicious authentication and account activity during night-shift security operations.
  • Monitored and responded to security alerts from client Windows endpoints using EDR and SIEM platforms, supporting initial investigation, containment, and escalation activities.
  • Analyzed centralized security logs to identify suspicious events, correlate indicators, and support incident investigation and threat detection.

03 · Analyst training

Jul 2023 - Aug 2023

HybridApprenticeship

GHP Training - Associate Cyber Security Analyst (InfoSec)

TrendAI

Pasig, National Capital Region, Philippines

  • Completed GHP Training as an Associate Cyber Security Analyst (InfoSec) at Trend Micro, covering Operating Systems, Networking, Security, AWS, and Python.
  • Built hands-on experience with Windows, Linux, Active Directory, IIS, Nginx, PowerShell, Bash scripting, and system troubleshooting. Applied networking fundamentals using Wireshark, TCP/IP, and IP subnetting.
  • Performed email security triage, Windows Event Log analysis, and log investigation using ELK Stack and Kibana.
  • Practiced Blue Team fundamentals based on SANS Institute training.
  • Worked with AWS security best practices, AWS CLI, and Boto3. Developed Python-based solutions using Requests, Beautiful Soup, Django, web scraping, and VirusTotal API integration.