Open to opportunities

Sang Nguyễn

@sangnguyn

Message

Cloud security engineer specializing in AWS security, penetration testing, and SOC/SIEM automation.

Vietnam

Message

What I'm looking for

I seek hands-on roles securing cloud-native environments (AWS), building SIEM/automation, leading detection/response, and working in collaborative, compliance-focused teams.

I am a cloud security engineer focused on AWS security architecture, penetration testing, and SOC/SIEM operations, with strong experience securing FinTech infrastructure and automating compliance and detection workflows.

I have led cloud security initiatives including multi-account AWS frameworks, SIEM deployments (Wazuh, Splunk), and automated compliance using Config, Lambda, and IaC scanning tools such as Checkov and TFSec, delivering measurable reductions in misconfigurations and detection times.

My projects include an AI-powered security automation platform, centralized AWS multi-account security framework achieving 95% CIS AWS Benchmark compliance, and automated threat detection systems using ML models; I prioritize pragmatic, measurable security improvements and cross-team incident response.

Experience

Work history, roles, and key accomplishments

Current

Cloud Security Engineer

Current

Resola INC

Aug 2025 - Present (6 months)

Lead cloud security initiatives for AWS infrastructure, implementing secure architectures, automated compliance checks, and threat detection to strengthen FinTech security posture.

AWS Security GuardDuty CloudTrail IAM Terraform CloudFormation Checkov

Security Engineer

VNPAY

Mar 2024 - Jul 2025 (1 year 4 months)

Implemented SOC and SIEM solutions, led penetration testing of payment systems, and reduced SIEM false positives by 40% while maintaining PCI-DSS compliance.

Wazuh Splunk ELK Penetration Testing Burp suite ZAP Python BASH Vulnerability Management PCI DSS

Cloud Security Intern

VNPAY

Aug 2023 - Feb 2024 (6 months)

Supported distributed SIEM deployment and optimized cloud log collection; developed Python parsers for CVE analysis and configured real-time Splunk dashboards.

Splunk SIEM Python CVE AWS CloudTrail Log Collection Dashboards Automation

Education

Degrees, certifications, and relevant coursework

University of Information Technology - VNU-HCM

Bachelor of Engineering, Information Security

2020 - 2024

Activities and societies: Research projects in ML-based API attack detection and SIEM architecture; Talented Engineer Program coursework.

Completed the Talented Engineer Program in Information Security with research on ML-based API attack detection, high-performance SIEM architecture, and microservices security.

Viettel Digital Talent (VDT)

Certificate Program, Information Security Training

2023 - 2023

Activities and societies: Hands-on labs in pentesting, SIEM deployment, and threat hunting.

Completed an intensive information security training program covering advanced web application pentesting, SIEM architecture, threat hunting, and incident response.