Achieve

Integrated security into CI/CD pipelines (Bitbucket) using tools like Snyk and Checkmarx, providing actionable feedback to developers during builds.

Reduced 100+ critical findings across 800+ Kubernetes services using Crowdstrike Falcon App Security, collaborating with multiple teams.

Achieved 50% reduction in vulnerabilities with "Mature" exploit maturity using Snyk, tracking CVEs, and coordinating remediation efforts.

Developed and delivered security KPIs using JSreport, providing tailored reports to leadership and aligning security priorities.

Remediated GCP VPC misconfigurations using Wiz, eliminating unrestricted internet access and improving cloud security.

Automated Cloudflare WAF rules with Terraform, streamlining updates and enhancing infrastructure-as-code workflows.

Secured a critical mobile app (80% company revenue) with Promon SHIELD®, protecting against static and dynamic attacks.

Eliminated plaintext secrets across the codebase using TruffleHog, preventing credential exposure.

Deployed Qualys vulnerability management over GKE using Helm charts, ensuring robust production security.

Information Security Analyst III (DevSecops)

KBR, Inc.

React frontend
Distributed backend using DotNetCore, docker.
REST API testing using Postman
Red Hat OpenShift and K8s administration
Red Hat Linux and CentOS
Certified Kubernetes administrator

Senior technical professional - software engineering (Devops)

Ricardo Defense

Security+ certified
EC Council Certified Ethical Hacker certified
Active DOD secret clearance
Software QA, test plan development
Electron/Spectron, WebdriverIO
Requirement gathering and documentation using Enterprise Architect
Linux, Windows Server proficiency
Operation systems security baseline configuration
Web automation technology such as Selenium Webdriver
Full Stack web development with Javascript/C#/Sql Server
Node.js, Google Polymer framework (1 and 3), ASP.NET web services, Microsoft SQL Server.

Software Engineer

Edmunds.com

• Performed daily task in support of the company’s internal IT department, Pit Stop.
• Rearranged and managed department’s IT equipment configuration room, results in improved work efficiency of the entire help desk staff and speedy response of employee’s various hardware and software requests.
• Updating active directory entries for the company wide move and tracking, documenting of department’s IT assets into database to accurately reflect the daily operation needs of the IT department.
• Set up and collect computer hardware for new and departed employees and maintaining general cleanliness of the employee’s work stations.
• Exposure to different departments of the company by actively engaging in conversations and general IT support of the employees, gaining valuable insights to current hot trend in the realm of business and technology such as big data, business analytic, visualization and different tools/forms used to manage projects.

IT Intern

Business Data links

• Daily check up of company's assets including multiple windows server 2008 systems for clients and  perform SANS checks.
• Communicating with customers and handling their calls to further support the daily troubleshooting tasks of help desk employees.
• Hands on knowledge of common networking routers and switches, building of computer/server systems for the upcoming CIS classes in Cal Poly Pomona.
• Entry level knowledge of cloud computing platforms such as the deployment of VMware vsphere and basic configuration of ESXi software

Student Intern

US Navy

•	Worked as ground crew, responsible for performing launch, recovery, inspection, cleaning, fueling and servicing of 13 F/A – 18E aircraft
•	Corrosion Control Technician, Perform corrosion prevention on F/A – 18E aircraft, painting and sanding of metals.
•	Leading Officer responsible for the daily cleaning and space management of ship living spaces while on deployments.
•	Three years of overseas working experience in Japan, one and half year in Norfolk, Virginia.

Aviation Structural Mechanic (AM)

China Fair USA Inc

•	Worked as a customer service agent and telemarketer, Answer questions from customers via telephone.
•	Explained product and expo services to our customers.
•	Recording name, address, phone number of current customers.
•	Follow up on customers after initial sales pinch.
•	Conduct surveys and feedback of customers.

Telemarketing/Customer service

Certified DevSecOps Engineer with expertise in integrating security into CI/CD pipelines, cloud infrastructure, and application development. I hold certifications including GCP Professional Cloud Security Engineer, Certified Kubernetes Administrator (CKA), and CISSP.

In my recent role at a leading fintech company, I reduced critical vulnerabilities, automated cloud security workflows, and delivered customized security metrics to senior leadership, aligning with PCI and PII compliance standards.

I’m seeking full-time opportunities as a Cloud Engineer or DevSecOps Engineer in remote or local positions, with a focus on security, automation, and multi-cloud environments.

Taplio

Harvey Lin, CISSP's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Harvey Lin, CISSP's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Harvey Lin, CISSP's Linkedin Analytics