Heartbeat
Internal threat operations platform for news aggregation, geolocation mapping, ransomware tracking, and LLM-assisted monthly TI review workflows.
Internal ToolNotable Work
Tools I’ve built for threat intelligence, detection engineering, and incident response, from internal CTI workflows to public investigation utilities.
Huntsman
Agentic threat intelligence and hunting workspace using RAG over live sources and uploaded reports to build executable Sentinel/XDR hunt packages.
Internal ToolShadowPulse
Unified IP, domain, and hash investigation across VirusTotal, Shodan, GreyNoise, and AbuseIPDB.
View live tool →Work Experience
Incident Responder
Oct 2025 – PresentEY
Support incident response engagements across triage, scoping, containment advisory, evidence coordination, and forensic artifact analysis. Manage CTI workflows, mentor analysts, and build internal tooling for threat operations and detection engineering.
Software Engineer Intern
May – Aug 2024LandingPad
Improved UI/UX resulting in 25% increase in user engagement. Redesigned frontend components using Tailwind CSS, Liquid (Shopify), and JavaScript. Integrated Shopify with QuickBooks.
SOC Analyst Intern
Dec 2021 – Aug 2022Ensign InfoSecurity
Triaged 300+ security alerts using SIEM and CrowdStrike EDR, produced threat intelligence reports, and identified 50+ client-specific vulnerabilities from underground forums and feeds.
Cyber Security Specialist
Dec 2018 – Aug 2021Digital Intelligence Service · Seconded to Cyber Security Agency of Singapore
Pioneer batch of Cyber Specialists conducting threat hunting, SOC monitoring, and digital forensics for government cyber operations and Critical Information Infrastructure environments.
Full Stack Developer Intern
Dec 2017 – Feb 2018Henderson Security Services Pte Ltd
Completed various full-stack development tasks during internship.
Skills & Tooling
IR & Forensics
Triage, containment, root cause analysis, X-Ways, Magnet AXIOM, FTK Imager, Arsenal Image Mounter
Threat Intel & Hunting
OSINT, underground forum analysis, CVE analysis, threat actor profiling, detection engineering
SIEM & EDR
Splunk SPL, Microsoft Sentinel KQL, QRadar, CrowdStrike, OpenCTI
Development
Python, JavaScript, FastAPI, Claude, Gemini, OpenAI, RAG workflows, LLM integration
CTF Competitions
BrainHack CDDC 2023
Cyber Defenders Discovery Camp - National cybersecurity competition
Read writeup →Grey Cat The Flag 2022
NUS Greyhats annual CTF competition
Read writeup →STANDCON 2022
Annual cybersecurity conference and CTF
Read writeup →STACK the Flags 2022
GovTech national CTF competition
Read writeup →Certifications
Blue Team Level 1 (BTL1)
Security Blue Team certification for junior Security Analysts
Verify badge →Certified Ethical Hacker (CEH)
EC-Council certification for ethical hackers
Verify badge →