Nguyen Hung Anh
Threat Hunter · Incident Responder · Malware Analyst
CHFI v11
HTB CWES
INE eJPT
AWS CloudOps
JNCIA-Junos
Fortinet
Professional Summary
Cybersecurity professional with 15+ years spanning cyber defense, cloud infrastructure, and banking operations. Specializing in Digital Forensics & Incident Response (DFIR), threat hunting, and malware analysis — leading enterprise-level IR engagements, building detection engineering pipelines, and reverse engineering advanced persistent threat (APT) malware. Holds globally recognized credentials (CHFI v11, HTB CWES, eJPT, AWS CloudOps, JNCIA-Junos, Fortinet) with a strong background in SIEM engineering, threat intelligence platforms, and adversary simulation. Passionate about reducing dwell time and strengthening organizational cyber resilience.
Professional Experience
Cyber Security & DevOps Engineer
Outpost24
July 2018 – Present · Remote
- Deployed and operated SaaS security platforms specializing in Security Monitoring, Incident Response, and Threat Hunting.
- Conducted Vulnerability Assessment and produced Threat Intelligence Reports for enterprise clients.
- Bridged DevOps and cybersecurity practices to ensure continuous security integration in CI/CD pipelines.
Offensive Security Researcher
Government Organization · Vietnam
2018 – Present
- Specializing in Threat Hunting, Incident Response, and Threat Intelligence across government and enterprise environments.
- Conducted red team operations and adversary emulation to assess and strengthen national-level security posture.
- Produced classified threat intelligence reports aligned with MITRE ATT&CK framework.
Cloud & Infrastructure Engineer (AWS)
GoTyme X
March 2018 – September 2021
- Designed, implemented, and managed secure and scalable network solutions on AWS Cloud.
- Ensured high availability, performance, and operational reliability of cloud-hosted financial services.
- Collaborated with security teams to enforce IAM policies, VPC segmentation, and encryption standards.
Deployment Engineer
EI CO., LTD
October 2008 – April 2018
- Implemented and maintained NCR ATM systems including hardware deployment and network configuration.
- Provided troubleshooting and operational support for banking infrastructure across multiple sites.
- Coordinated with banking clients to ensure 99.9% uptime of ATM networks.
Technical Skills
DFIR & Forensics
Malware Analysis & RE
SIEM Engineering
Threat Intelligence
Python / PowerShell
Cloud Security (AWS/Azure)
Key Projects & Research
Ransomware Incident Response Simulation
Full-lifecycle IR engagement: initial triage, network containment, forensic
acquisition (RAM + disk), decryption key analysis, and root-cause mapping to MITRE ATT&CK framework.
Delivered executive report + technical remediation plan.
GhidraKAPEVelociraptorVolatilityATT&CK
Navigator
Threat Intelligence Feed Automation
Designed enriched IOC pipeline from OSINT sources + MISP, integrated with Splunk
SIEM. Achieved <20 min threat-to-detection (TTD) for APT infrastructure indicators.
PythonMISPThreatQSplunkVirusTotal API
Malware Analysis Sandbox
Built automated dynamic analysis workflow using CAPE/Cuckoo + static unpacking
pipeline. Produced YARA rules deployed for in-the-wild sample detection across SOC environment.
YARACAPEIDA
ProPythonx64dbg
Certifications & Credentials
CHFI v11 — EC-Council
Computer Hacking Forensic Investigator
HTB CWES — Hack The Box
Certified Web Exploitation Specialist
eJPT — INE / eLearnSecurity
Junior Penetration Tester
AWS Certified CloudOps Engineer
Cloud concepts & security
JNCIA-Junos — Juniper Networks
Juniper Networks Certified Associate
Fortinet Certified Associate
Cybersecurity & network security
Education
Bachelor of Information Technology
Duy Tan University
2015 – 2019