About

I build agentic security-review workflows and help engineering teams turn complex findings into secure product decisions.

Download CV ↓
  • OSCP · OSWE · CRTP
  • 5+ products reviewed
  • 3 end-to-end red-team engagements
  • AI review workflow adopted by the team

⌁ Focus

I’m interested in how security work can stay rigorous while making complex systems easier to build and operate. Current focus areas include:

01

AI Security Automation

Multi-agent and multi-model repository review workflows with output validation, noise filtering, and structured human review.

  • Agent workflows
  • Prompt injection
  • Guardrail testing
02

Product Security

Practical threat modelling and Web, API, and mobile security review that helps engineering teams remediate with confidence.

  • STRIDE
  • Code review
  • Remediation
03

Offensive Security

Red-team and penetration-testing experience used to trace credible attack paths and turn them into actionable fixes.

  • Red teaming
  • Active Directory
  • AWS / Azure

⌂ Experience

Full timeline →
Jul 2026 — now

AI Security Engineer

now

Crypto.com · Taiwan (Remote)

Lead AI security capabilities for internal product security, helping teams turn autonomous code-review signals into prioritised, engineer-ready decisions.

Built an agentic security-review workflow that became a primary working mode for the product security team.

Sep 2025 — Jun 2026

Application Security Engineer

Crypto.com · Taiwan (Remote)

Embedded product security across pre-release Web and mobile delivery, from design risk discovery through remediation verification.

Skills

AI Security

  • Agent orchestration
  • Multi-model validation
  • LLM output evaluation
  • Prompt injection
  • Guardrail testing

Product Security

  • Threat modelling
  • Secure code review
  • Web / API / mobile
  • HackerOne triage
  • SAST / DAST

Offensive Security

  • Red teaming
  • Penetration testing
  • Active Directory
  • Cloud security review
  • PCI-DSS assessment

Engineering

  • Python
  • Bash
  • JavaScript
  • Angular
  • n8n
  • OpenCode

Credentials

Certifications

Elsewhere

For previous writing and public notes, visit the blog.
For security engineering conversations, .