Hakimi Heikal

Cybersecurity graduate (Bachelor of Computer Science (Cybersecurity), UNITEN, CGPA 3.50, multiple Dean’s List Awards) with a four-month Group Information Security internship at FWD Technology and Innovation Malaysia covering application and API security testing, vulnerability validation and triage, and external attack surface monitoring.

Built

Python automation that reduced vulnerability-reporting effort by 40% and led four interns to deliver an automated IT SLA reporting dashboard.

Qualys Certified

Specialist (VMDR). Seeking an entry-level role in Application Security, Security Analysis, Vulnerability Management or Security Operations, applying hands-on API testing, vulnerability triage and Python automation.

Application Security / Automation Intern at FWD Technology and Innovation Malaysia — Group Information Security (2026-06 – 2026-09)

• Performed application and API security assessments across 5 applications and 3 APIs using Burp Suite, Postman and OWASP testing methodologies, including hands-on API penetration testing in Burp Suite.
• Validated and triaged 100+ vulnerability findings and assets from Qualys VMDR, filtering false positives and supporting risk-based remediation prioritisation.
• Investigated internet-facing assets, IP reputation, SSL/TLS and browser security findings using Black Kite to support external attack surface monitoring.
• Mapped and validated asset ownership using Orca Security, Qualys and internal asset repositories, coordinating remediation with cloud, application and infrastructure teams across multiple business units.
• Developed Python data-cleansing and automation scripts that reduced vulnerability-reporting effort by about 4 hours (40%) per reporting cycle; applied advanced Excel functions and data matching to improve reporting workflows.
• Produced security reports, remediation dashboards, technical documentation and executive summaries for security and technology stakeholders.
• Gained exposure to SOC operations by observing the SOC team’s monitoring and investigation workflows in Microsoft Defender for Endpoint.
• Wrote SOPs, process documentation and workflow diagrams for security operations and governance; collaborated with security engineers, developers and business stakeholders across multiple countries in the FWD Group.

Project Lead, Dashboard @ FWD at FWD Technology and Innovation Malaysia

• Led a team of four interns to design and develop an automated IT SLA reporting dashboard, with requirements gathering and stakeholder engagement across 8+ stakeholders in 4 business/technology functions.
• Automated reporting to reduce manual effort by about 3 hours (70%) per reporting cycle; developed SLA metrics and reporting logic and presented progress and outputs to security and technology stakeholders.

External-Facing VIP Monitoring at FWD Technology and Innovation Malaysia

• Documented current-state and future-state governance processes, and performed business process mapping and gap analysis with HRIS, IAM and Information Security stakeholders; used Microsoft Sentinel as part of the project.

Bachelor of Computer Science in Cybersecurity – Universiti Tenaga Nasional (UNITEN) (2023-10 – 2026-08)

Matriculation in Physical Science – Penang Matriculation College (2021-07 – 2023-05)