Yi Hsuan Wu
Open to AI & Product Security roles

Industry Experience

Jul 2026 — now

AI Security Engineer

now

Crypto.com · Taiwan (Remote)

Lead AI security capabilities for internal product security, helping teams turn autonomous code-review signals into prioritised, engineer-ready decisions.

  • Built an internal review platform that accepts repository URLs, orchestrates n8n and proprietary services, and provisions OpenCode-based audit environments.
  • Designed reusable agent skills around vulnerability patterns; compared multi-model outputs, filtered low-value findings, and produced structured reports for security review.
  • Tested prompt-injection and guardrail-bypass paths for internal AI use cases, while maintaining an internal LLM security knowledge base.
  • Multi-agent review
  • AI guardrail testing
  • Internal LLM wiki
Sep 2025 — Jun 2026

Application Security Engineer

Crypto.com · Taiwan (Remote)

Embedded product security across pre-release Web and mobile delivery, from design risk discovery through remediation verification.

  • Performed secure code review and STRIDE threat modelling across 5+ products, alongside pre-release Web and mobile security reviews.
  • Ran monthly security scanning and hands-on validation with SAST, Semgrep, Burp Suite, and Nessus; worked with engineers to prioritise remediation and verify fixes.
  • Triaged external vulnerability disclosures and third-party penetration-test reports, turning findings into clear, trackable engineering actions.
  • Web / mobile review
  • Threat modelling
  • Retesting
Sep 2023 — Sep 2025

Threat Researcher, Red Team

Trend Micro · Taiwan

Ran offensive engagements that validated material enterprise attack paths and converted attacker evidence into remediation priorities.

  • Delivered 3 end-to-end red-team engagements over 2 years, spanning enterprise infrastructure and Active Directory environments.
  • Mapped attack paths through to Domain Controller compromise and translated the resulting evidence into practical remediation guidance.
  • Identified critical RCE and SSRF issues in services and products, and assessed AWS and Azure environments against PCI-DSS requirements.
  • Red teaming
  • Active Directory
  • PCI-DSS
Sep 2022 — Feb 2023

Research Intern, Red Team

DEVCORE · Taiwan

Supported offensive research and team enablement through repeatable Active Directory attack exercises and internal tooling.

  • Researched Active Directory attack methodologies and translated findings into reproducible internal exercises.
  • Built a security lab and an Angular-based training platform to make hands-on experimentation and team learning repeatable.
  • AD research
  • Angular
  • Security labs
Jul 2021 — Aug 2021

Software Engineering Intern

MediaTek · Taiwan

Improved firmware debugging through repeatable performance measurement and clearer system-behaviour visibility.

  • Automated camera-firmware performance measurement with scripts that made test results easier to collect and compare.
  • Created a visualisation site to help engineers inspect system behaviour, investigate regressions, and debug more efficiently.
  • Python
  • Visualisation
  • Debug tooling

Education