Resume - Hanif Suandy

Company

Deloitte Singapore

Current Focus

Penetration Testing

Skills

Cybersecurity

Web Application Penetration Testing
Network Penetration Testing
Source Code Review

Tools

Kali Linux
Parrot OS
Burp Suite
OWASP ZAP
Nessus Vulnerability Scanner
PentestBox
Metasploit
Fortify Static Code Analyzer
tmux

Scripting

Python
Bash
PowerShell

Techonologies

Virtualization
Docker
Portainer
GitHub
Gitlab
Cloudflare
11ty
Hugo

Soft Skills

Team Player
Determined and Reliable
Growth Mindset

About

I’m a husband to a loving wife and a proud father to a beautiful daughter. With a deep love for technology, I’m always eager to explore new gadgets and experiment with my smart home and home lab setups.

Professionally, I’m a penetration tester working towards my OSCP certification, constantly challenging myself to grow and refine my skills. I enjoy sharing my journey on my website through detailed write-ups of challenges I’ve completed on platforms like Hack The Box, Proving Grounds, and other virtual labs, contributing to the infosec community.

Outside of work, my passions include sports climbing, particularly bouldering, and freeskating—activities that keep me energised and focused. My curiosity for technology and innovation ensures I’m always learning and adapting to the ever-changing tech landscape.

Work [ + ]

Deloitte Singapore

[+] Consultant (Cyber Risk)

Conducted Network and Web Application Penetration Testing, identifying vulnerabilities that enhanced overall security posture.

Conducted source code reviews, enhancing code quality and identifying potential vulnerabilities.

Conducted engagements in public sectors including NEA, MOH, and public hospitals, enhancing collaboration and improving service delivery.

Facilitated kick-off meetings to define the scope of engagements, ensuring all stakeholders had a clear understanding of project objectives.

Utilized tools including Kali Linux, Burp Suite, ZAP, Nessus Vulnerability Scanner, PentestBox, Metasploit, and Fortify Static Code Analyzer.

Compiled comprehensive reports for clients, featuring an executive summary and a technical analysis, enhancing client understanding and decision-making.

Collaborated with stakeholders to address findings based on provided recommendations, ensuring additional support was available when further assistance was necessary.

Jul 2022 - Present

Xtremax Pte Ltd

[+] Security Consultant

Supported Security Operations for a web hosting project.

Performed evaluation of new patches and software updates daily.

Performed VAPT of hosted web applications on an ad-hoc basis.

Performed VA of the network infrastructure and its web applications on a quarterly basis.

Audited logs and accounts for any suspicious/unauthorised access.

Mar 2021 - Jul 2022

Xtremax Pte Ltd

[+] Associate Security Consultant

Audited accounts against the platform’s Access Control Matrix.

Reviewed audit logs to check for any suspicious/unauthorised access.

Performed VA and ensured all findings can be closed with the proper remediation or justification.

Worked closely with Engineers to investigate the root cause of incidents and provide workarounds as well as preventive measures.

Jun 2020 - Mar 2021

Xtremax Pte Ltd

[+] Technical Support Engineer (Team Lead)

Managed a team of Technical Support Executives for a web hosting project.

Assisted team members with difficult and/or escalated tickets.

Performed first-level troubleshooting using AWS Services such as EC2, S3, CloudFront, etc before escalating to System Engineers.

Ensured the needs of the team are fulfilled including acting on feedback/suggestions to improve operations.

Jun 2019 - Jun 2020

Xtremax Pte Ltd

[+] Technical Support Executive

Provided technical support for a project hosting over 500 websites for government agencies via phone calls and emails.

Followed standard operating procedures, and responded professionally.

Solved issues and requests raised by customers.

Ensured service requests were resolved timely to meet service KPIs.

Responded to up to 20 technical issues a day in a timely manner.

Communicated effectively between customers and the development team on escalated issues.

Apr 2018 - Jun 2019

NCS Group

[+] Desktop Engineer

Provided IT support for a school of over 500 students and over 70 academic and non-academic staff during normal school operations as well as special occasions.

Managed over 300 devices weekly and troubleshooted an average of 6 devices daily.

Reported an average of 10 incident reports per week and resolved said incidents as per the required Service-Level Agreement (SLA).

Handled and documented the movement of over 50 devices weekly.

Cloned over 200 laptops for the upgrading of Operating System (OS) from Windows 7 32-bit to Windows 7 64-bit over a span of 2 months.

Cloned 5 laptops with the Windows 10 Operating System (OS) to test the compatibility of applications to be used on the new OS.

Wrote 10 command line scripts to automate a wide variety of software-related tasks.

Liaised with 2 vendors to assist in setting up ICT classes and configure devices prior to each class up to 2 times per week.

Liaised with 2 other vendors for maintenance support and reporting of faulty equipment to request for on-site repair or assistance.

Provided AV support during events and special occasions including the operation of the audio console and setting up of microphones.

Feb 2016 - Aug 2017

Jobster

[+] Desktop Support Engineer

Assisted major government agencies in upgrading the Operating Systems of over 50 laptops and assisted each staff to set up his/her laptop as it was configured before the upgrade.

Provided solutions to over 10 IT setbacks during the upgrades.

Worked with the in-house Desktop Engineers to speed up the upgrade by requesting for access to more Local Area Network (LAN) connections to enable the upgrade of up to 4 more laptops simultaneously.

Significantly reduced time-consuming task by writing a script to automatically install several network printers the OS upgrade of each laptop.

Oct 2015 - Jan 2016

Education

Bachelor of Computer Science (Digital Systems Security)

University of Wollongong, Australia

2017 - 2020

Diploma in Electronics, Computer & Communication Engineering

Singapore Polytechnic, Singapore

2005 - 2008

Recent Projects

Home Lab

A home lab to host various services and applications to improve quality of life. Also contains virtual labs meant for testing and ethical hacking.

Description:

Deployed Promox VE on a Mini PC to spin up VMs and LXCs for hosting of servers and applications.
Made use of Docker to easily spin up lightweight containers of applications to improve quality of life.
Self-hosted applications provide a sense of control and security over personal data as compared to those hosted and controlled by third-parties.
Currently in the process of upgrading the home lab hardware to increase memory and storage.
Have plans to self-host open-source LLMs in the future as most Generative AI services online have limited free use.

Proxmox
Virtual Machines
LXC (Linux Container)
Docker
Docker-compose
Portainer
Linux distributions

Smart Home

Personal project to automate my home.

Description:

Deployed an open-source smart home automation software, Home Assistant, in my Home Lab to control and interface smart devices in the house.
Installed smart devices such as smart switches, smart plugs, smart lights, smart speakers, smart doorbell, motion sensors, presence sensors, light sensors and door sensors.
Configured and deployed the smart devices using wireless protocols such as Zigbee, Wi-Fi and Bluetooth.
Created several automations for a smart home experience.
Currently experimenting with a local voice assistant to replace Google Assistant / Amazon Alexa.
Constantly adding more devices and updating existing ones.

Home Assistant
Zigbee2MQTT
MQTT
Zigbee
Wi-Fi
Bluetooth