Rong Ding

Rong Ding is a cybersecurity professional with incident response, vulnerability assessment, penetration testing, black-box testing, and red teaming across web applications, networks, and enterprise environments. Skilled in using security tools such as Tenable, Kali Linux, Burp Suite, and M365 suite, and has been involved in identifying, validating, and mitigating security issues. His background includes preparing technical and compliance reports, supporting audits, and communicating findings to both technical teams and stakeholders.

He has also gained exposure to cloud and infrastructure technologies, including Kubernetes and identity and access management, supporting broader security operations.

Associate at TRS Forensics Pte. Ltd. (2025-06 – 2026-02)

• Executed incident response and disaster recovery for abrupt network outages
• Communicated Fortigate threat-intelligence findings to stakeholders
• Conducted periodic VAPT on TRS's web application, performed remediation after VAPT to strengthen overall security adhering to CTM tier 5 standards
• Conducted remote VA by utilizing Tenable agents then generated custom VA report for clients in achieving Cyber Essentials certification
• Daily responsibilities consist of ensuring zero disruption after pushing system updates through Action1
• Monitored and responded to endpoint security anomalies using Microsoft Intune
• Managed identity and access management in Microsoft Entra ID, including user lifecycle management, MFA enforcement, and access troubleshooting

DevOps at Freeboh (2024-12 – 2025-03)

• Designed and built a Kubernetes-based container infrastructure on Linode
• Architect a Kubernetes container infrastructure from the ground up, enabling automated testing workflows and seamless CI/CD integration

Senior Cybersecurity Consultant at Avotis (2021-02 – 2024-04)

• Discovered and remediated critical SQL injection vulnerability with SQLmap in a public application, preventing regulatory exposure
• Collaborated with development teams on to ensure the implementation of secure coding practices and SQL server hardening for SQL sever 2019
• Utilized Tenable Nessus for onsite network VA and multiple tools in Kali for network and web app PT, then generate report for client's audit purpose and attaining certain grants
• Performed black-box security assessments and red team exercises to identify weaknesses in WAF and network firewalls, then validating remediation through retest
• Daily responsibilities consist of Coordinated multi-client testing schedules and ensured properly configured environment for VA testing and timely delivery of reports

Associate Cybersecurity Consultant at Nexia TS (2018-02 – 2020-12)

• Found and remediated a major MITM vulnerability in a loyalty app then reproduced a POC using Burpsuite
• Conducted ISO 27001 policy reviews, supporting clients in achieving certification compliance
• Performed network VA and web application using Tenable Nessus and multiple tools from Kali then generate report for client's auditing purpose
• Ran phishing simulations and awareness training

Diploma in Computer Engineering – Singapore Polytechnic (2015)