About Me
Experience
Security Engineer
Unknown - - Now
职位: Security Engineer | 时间段: 1 year | 工作内容: Conducted internal security assessment for decentralized and centralized exchange platforms. Performed comprehensive server configuration review and web vulnerability testing (OWASP Top 10). Identified multiple critical issues (authentication, access control, input validation) and delivered remediation steps adopted by DevOps teams, improving baseline security.
Security Engineer
Unknown CEX Platform - - Now
职位: Security Engineer | 时间段: 1 year | 工作内容: Investigated post-intrusion event on a centralized exchange; traced full attack path across Linux and Windows servers. Collected forensic evidence, pinpointed initial access vector, and coordinated patching and configuration changes. Implemented hardening measures (least privilege, logging, network segmentation) that reduced repeat risk.
Security Engineer
Unknown - - Now
职位: Security Engineer | 时间段: 1 year | 工作内容: Performed periodic hardening checks on >100 production servers. Improved patch compliance cycle from 30 to 14 days through clear remediation workflows.
