$ cat experience.log

Experience

  1. Apr 2025 – Present

    Penetration Tester / Red Team

    Full-time · On-site · Ho Chi Minh City

    • Penetration testing of web apps, APIs, networks, cloud, mobile apps and AI services/models.
    • Building and operating AI-powered and automated tooling to speed up red teaming.
    • Attack surface mapping and reconnaissance with ASM tooling.
    • Simulating real-world threats, including social engineering, as an external ethical hacker.
    • Hunting exposures across the dark web, public sources and the internet.
  2. Mar 2026 – Present

    Full Stack Engineer · Freelance

    Remote · Asia

    • Designing and building applications across frontend and backend.
    • Developing, deploying and maintaining databases, APIs and cloud infrastructure.
    • Turning business requirements into scalable, secure, reliable systems.
  3. Feb 2025 – Present

    Founder · 2vane

    Part-time · Hybrid · Vietnam

  4. Oct 2025 – Jan 2026

    Chief Technical Advisor · ASUP Records LLP

    Part-time · Remote · India

    • Defined scope, objectives and technical direction with the Board.
    • Advised on stack, system architecture and infrastructure design.
    • Established security frameworks and best practices; identified technical risks and mitigations.
  5. Jan 2022 – Feb 2025

    Project Manager · Xelvis64

    Full-time · Hybrid · Ho Chi Minh City

    • Built project plans, timelines and schedules.
    • Allocated resources, managed budgets and steered projects around risk.
  6. Jan 2022 – Nov 2024

    Research Collaborator · University of Information Technology

    Part-time · Hybrid · Ho Chi Minh City

    • Analysed Windows and Linux security, identifying vulnerabilities and hardening defenses.
    • Researched blockchain and built ML/DL malware detection models for conference publications.
  7. Nov 2022 – Aug 2023

    Security Operations Center Analyst · CMC Telecom

    Part-time · Hybrid · Vietnam

    • Network security analysis with Arbor.
    • Deployed IDPS for enterprise networks; managed log pipelines and analysis on ELK.
    • Mapped security infrastructure to business context using MITRE ATT&CK.