Open to opportunities

linh gordon

@linhgordon

Cybersecurity penetration tester and vulnerability researcher focused on practical findings and developer-ready reports.

Canada

Message

What I'm looking for

I’m seeking internship and work opportunities in cybersecurity where I can keep learning, contribute to real-world security work, and strengthen my technical and analytical skills—especially through assessments, validation, and practical reporting.

I’m a Master of Cybersecurity student with hands-on penetration testing and vulnerability research across web, mobile, and internal network environments. In previous roles, I planned and executed security assessments, validated exploitability and business impact, and produced clear reports with reproduction steps, risk context, and remediation recommendations for engineers and security stakeholders.

I’m especially motivated by turning technical discoveries into actionable outcomes—triaging findings to reduce false positives, collaborating cross-functionally to explain root causes, and supporting fixes through retesting and validation. I also build lightweight tooling and reusable checklists to improve consistency and speed up regression validation, and I’ve shared my learning through CTF writeups and technical notes to help others move faster.

Experience

Work history, roles, and key accomplishments

Penetration Tester

Viettel Cyber Security

Oct 2024 - Apr 2025 (6 months)

Planned and executed security assessments across web, mobile, and internal network environments, validating findings with proof-of-concept work and retesting. Verified exploitability and business impact to reduce false positives, produced developer-focused reports with remediation recommendations, and improved regression validation with reusable checklists/tooling.

Security Assessments Security Testing Proof of Concept

Web Security Intern

Viettel Cyber Security

Nov 2023 - Oct 2024 (11 months)

Conducted vulnerability research for web applications by investigating exploitation conditions, mitigation strategies, and security implications for internal use. Recreated public and emerging issues in Docker/VM environments, built minimal PoCs, and created small automation utilities (e.g., request/payload generation) to streamline repeatable regression checks.

Vulnerability Research Exploitation Condition Analysis Request Crafting Knowledge Sharing