Arkayanik Law

Customer Project (SynQ Upgrade Project) • Upgrade legacy Warehouse Management System to SynQ • Design and implement code from project functional requirements, mainly on Receiving Module. • Customized base code implement to meet project specific requirements • Learns and translate legacy Systems sources code (PL/SQL) into Design and code implementation (Java) • Responsible to setup WMS Application, Weblogic server and SQLServer database configuration on customer VMs • Involved in FAT session with Customer to assist, troubleshoot, document issues found and missing requirements in specification document • Involved in SIT (On-site) activities - Performed communication testing between SynQ and existing PLCs - Execute Test Cases and document results and issues found. - Provide defects fixes and re-test Customer Project - Semiconductor - Involved in development of Common Modules function to be used at 3 Sites: Singapore, ShenZhen, ShangHai - Design, develop and test SOAP / REST APIs based on project specification.

• SynQ Major Release - Performed an 48 Hours automated stress test for SynQ Application - Warehouse Replenishment Process - Responsible to run stress test in Red Hat Enterprise Linux (RHEL) VM - Evaluated stress test performance with all possible database and server combination: - Servers: Oracle Weblogic Server, Wildfly Server - Databases: Oracle Database, SQL Server Database, PostgreSQL - Diagnosed decline in application performance and bottleneck issue with server logs and database dumps - Document each stress test variations result and performance issues encountered with solutions and release notes • SynQ Security - Setup OWASP ZAP to conduct security scan on SynQ, analyze and identify potential threats exist in software with detail reports - Provide analysis to determine legitimacy of threats reported and deliver solution for confirmed positive threats - Implemented security fixes for vulnerabilities, including SQL Injections, Private IP Disclosure, Session ID in URL Rewrite, Path Traversal and Absence of Anti-CSRF Tokens. - Assisted in YAML file configuration for False Positive threats to improve report accuracy - Documented OWASP ZAP Report Analysis Guideline and OWASP ZAP Report Configuration in GitLab for future team members reference - Responsible in setting up Burp Suite Scanning Tool and provide analysis difference between OWASP ZAP and Burp Suite Reports - Present the finding to Project Lead with conclusion to choose OWASP ZAP over Burp Suite: > Open Source, provide more details description, suggested solution for discovered threats when scanned against SynQ application • Bug Fixing Project - Provide solution for Support Request for issue found in customer projects. - Fixed bug trackers reported by Product Specialist - Write SQL migration scripts to backward patch previous releases

• Completed Core Java EE Training • Completed Fundamental of Warehouse and Logistic Operations Training to understand company business warehouse operation, SynQ system module and processes. • Involved in Bug Fixing Project, debug and provide solutions for Tracker issues such as: - Missing audit trail translation on application interfaces - Incorrect audit trail message on application - Icons is not rendered in application interfaces - Solved missing or incorrect Migration scripts using Flyway