Phú Hoàng Kim

Led security initiatives conducting secure code reviews, vulnerability assessments, and penetration testing across 25+ systems (cloud and on-prem). Architected a real-time Phishing Domain Monitor and integrated automated Jenkins CI/CD security stages, reducing manual security review time by 70% and ensuring SBV compliance.

Executed advanced penetration testing campaigns against web, mobile, and network targets, identifying critical vulnerabilities and delivering remediation guidance. Researched malware development and evasion techniques and delivered RedTeam training to internal and partner teams.

Architected and developed an Attack Surface Management platform with automated subdomain discovery, endpoint fuzzing, and web vulnerability scanning. Built large-scale data engineering pipelines, implemented Docker-based deployments, and researched AI-driven automated penetration testing techniques.

Performed comprehensive web and mobile application penetration tests and network integrity assessments while developing Python automation tools to improve scanning efficiency. Integrated Burp Suite with SIEM ingestion, collaborated with SOC teams, and configured enterprise firewalls (Sophos, FortiGate).

Grade: 3.34/4

Activities and societies: 50% merit-based scholarship; Top 5 Most Excellent Student in Information Technology (2022); Top 10 FPT Secathon (2022); Top 10 FPT Software Hacking CTF (2022)

Completed a Bachelor of Information Assurance at FPT University (graduated 2024) with a 3.34/4 GPA and received a 50% merit-based scholarship; recognized among the Top 5 students in Information Technology and placed in Top 10 in multiple security competitions.