Phúc Phạm Hoàng

DevSecOps / Cybersecurity / SOC Analyst with 4+ years securing cloud, endpoint, and application infrastructure. Delivered 55–85% improvement in security posture, an AI-driven SIEM/SOAR platform with sub-hour incident resolution, alongside SOC 2 + GDPR + ISO 27001 compliance readiness that unlocked a $1M+ ARR European market. I look to help organizations build security capabilities that scale without becoming blockers.

DevSecOps Engineer at Katalon (2024-08 – Present)

• Drove 55–85% improvement in security posture across AWS, endpoint, and device layers – proactively remediating 65+ critical misconfigurations and 0-day threats via Wiz CSPM, CrowdStrike Falcon EDR/XDR, and Jamf MDM.
• Unified SIEM/SOAR on Elastic Security Serverless, cutting monthly overhead from $6k to $1.5k while transitioning manual triage to AI-driven cross-stack correlation and adaptive runbooks, capping incident MTTR under 20 minutes.
• Served as primary DevSecOps and coordinated both internal and vendor audits to achieve 90% control adherence across ISO 27001, SOC 2, GDPR, facilitating European market expansion for a $1M+ ARR customer base.
• Embedded shift-left security across codebase, IaC, and CI/CD with SAST, DAST, and SCA – tightening supply chain security end-to-end with OWASP Top 10 and overall vulnerability escape rate reduced by 80%.
• Layered network security across Kubernetes by enforcing encrypted pod-to-pod communication for 15+ data-sensitive workloads, and leveraging Wiz ASM to identify and remediate exposure across 90% of internet-facing endpoints.
• Designed and deployed a multi-provider guardrail layer fronting 2M+ LLM requests/month across Bedrock and LiteLLM, powering PII masking and prompt-injection defense without disrupting core functionalities.
• Threat-modeled an in-house data analytics platform and consulted NIST Zero Trust guidance to recommend identity and context-aware controls for certificate management, workload isolation, and DLP to classify and protect sensitive data.
• Coordinated security awareness training, phishing simulations, and bug-bounty programs through KnowBe4 and HackerOne, fostering a security-first mindset across the organization.

Cloud / DevOps Engineer at Katalon (2023-05 – 2024-08)

• Architected a scalable AWS landing zone across 40+ accounts and 8 regions, enforcing least-privilege governance through Control Tower, Organizations, and SCPs, with automated tagging for cost allocation and resource ownership.
• Designed a hub-and-spoke network architecture with Transit Gateway and Client VPN, segmenting cross-account traffic and enforcing RBAC across US and Vietnam branch offices and business units.
• Engineered reusable Terraform modules, Helm charts, and multi-arch hardened golden images with automated CI/CD pipelines and OPA policy guardrails, reducing infrastructure drift to 14% and release time by 33%.

Software Engineer (Infrastructure, DevOps) at National Australia Bank (2022-05 – 2023-05)

• Built CI/CD pipelines using Jenkins (JobDSL, JCasC) and automated infrastructure provisioning, including database migrations, across AWS/Azure with Terraform and Ansible for containerized enterprise banking services.
• Wired EKS/AKS pod failure and deployment alerts into ServiceNow to auto-create and route incident tickets by team, decreasing MTTD by 20% and initial triage effort across 15 teams.

Master of Engineering Science in Software Engineering – University of Queensland, Australia (2024-02 – 2024-12)

Bachelor of Engineering in Information Systems – University of Information Technology – Vietnam National University (2019-07 – 2023-06)