Loading
Security Product Engineer
Three years shipping security software, back when your only co-programmer was the person at the next desk.
Security product engineer working across network security, Linux systems, and the infrastructure that keeps them running. Now at NUS pursuing a Master's in Infocomm Security.
I am a security product engineer with three years of industry experience taking security software from design to production, including deployments on customer infrastructure. My work sits between network security, Linux systems, and the tooling that operates them. I am now at NUS doing a Master's in Infocomm Security, and I build tools for security, infrastructure and the problems I run into day to day, from WAF tuning and host investigation to GPU servers and VPNs.
Technical Skills
Interests & Focus Areas
Network Security · Systems Programming · Rust & eBPF · Security Research · Observability · Linux Internals
Languages
Owned two enterprise WAF/Anti-DDoS accounts, rewrote the Remote Access Gateway as sole engineer, shipped a secure web proxy for enterprise and government clients, and stood up distributed monitoring.
Read details →Migrated the Haltdos product line to RHEL, co-led Pro WAF (upgrades, licensing, multi-platform), replaced VM builds with Jenkins, and mentored 6 interns, 4 hired.
Read details →Supported customer deployments, built the threat-intelligence feed into Haltdos detection, moved docs to Docusaurus, and made the Debian installer reliable.
Read details →Fixed installer bugs across Ubuntu, Debian, and RHEL, and contributed to Spring and Perl components in the production Haltdos environment.
Read details →Haltdos, Smart India Hackathon and college.
Security tools first, other work below.
Human review queue for ModSecurity CRS alerts. It reads JSON audit logs off the request path, groups repeated alerts into cases, has an LLM classify the evidence, and builds a parameter-scoped SecLang exclusion from server-owned fields for an operator to review. It never writes edge config or reloads a WAF.
NGINX C module that checks large JSON request bodies against structural safety limits before ModSecurity inspects them. Streaming parser over body buffers. Rejects malformed or abusive JSON and leaves the body in place for CRS so full inspection of large JSON is safe.
Single Go binary, CLI and web console, for running vLLM OpenAI-compatible servers as Docker containers on NVIDIA GPU hosts. GPU placement, VRAM launch checks with KV-cache estimation, Hugging Face cache management, and a React dashboard embedded in the binary.
Fast local SSH inventory navigator and launcher for Linux and macOS terminals. SQLite-backed hosts, TUI with fuzzy filtering, OpenSSH config import including Host * inheritance, and optional generated include files.
Single-file Bash tool that sets up a WireGuard server and manages its users on systemd Linux hosts: add and remove users, QR codes for phones, per-user traffic and last-handshake status. Validates every input, keeps keys root-only, and routes client IPv6 into the tunnel so it can't leak. Runs my own VPN server.
NUS security coursework on host-based intrusion detection using kernel audit logs. Simulates a multi-stage attack and instruments the victim with auditd and eBPF. Python provenance-graph analyzer with BEEP-style edge compression to surface the attack path from noisy streams.
Team course project at NUS. Bot-traffic mitigation for web applications: each session gets a trust score from behaviour (request timing, resource loads, mouse and scroll activity, navigation), DBSCAN groups similar low-trust sessions to catch coordinated low-rate bots, and NGINX with Lua enforces per-class rate limits. Inspired by SIFF stateless flow filtering and tested against naive, evasive and distributed swarm bots.
Other work
Side projects and hackathon builds outside security.
Walking and cycling route planner for Singapore, built out of my cycling hobby. It generates closed-loop and A-to-B routes on self-hosted OSRM, ranks nearby OpenStreetMap points of interest, and exports GPX.
Python · FastAPI · OSRM · OpenStreetMap · Next.js · TypeScript
Smart India Hackathon 2022 winner. Django + MongoDB IT asset inventory with a Windows agent that reports hardware specs, plus a helpdesk ticketing workflow.
Django · Python · MongoDB · PowerShell · Bash
Email is the best way to reach me about security product or research work.