Derrick Peng Ming Yang

1. Maintain, monitor, and manage of Linux OS (CentOS, Rocky, Ubuntu, and others) and Windows OS environments for the company. 2. Deploy, upgrade, and manage software (Bookstack and LLM models), and other Linux/Windows systems (hardware and software). 3. Maintain related documentation and process definitions for system changes as required. 4. Ensure proper housekeeping of data on storage. 5. Monitoring and maintenance of Server room facilities 6. Ensure and help on the user’s requirements, objectives, and needs. 7. Carry out special project or task as assigned. 8. Monitor, analyze servers and storage, establish priorities, and execute projects based on deadlines.

1. Endpoint Detection and Response (EDR) - Design and enforce policies for the company's assets in both office and production area - Hardening the policy to minimize risk - Monitor, investigate and remediate security alerts - Ensuring the version of all assets are updated and compliant 2. Next Generation Firewall - Implemented and reviewed firewall rules based on business needs - Monitored logs for any suspicious traffic - Hardened existing configurations and segmented networks via VLANs and zones 3. Network Detection and Response (NDR) - Defining policies to detect abnormal network behavior and block potential intrusions - Monitor suspicious traffic patterns across internal networks 4. DLP Solutions - Enforced device access restrictions to safeguard company assets - Developed and maintained DLP policies to prevent data leakage - Classified sensitive data to align with compliance requirements 5. WAF - Configured policies to protect web applications against OWASP threats - Fine tuned rules to minimize false positives while maintaining strong protection - Collaborate with development team to secure production-facing applications 6. Served as ISMS officer - Supports ISO27001/27002 audits - Ensure all security policies are updated and compliant 7. Threat Intelligence - Monitor for potential dark web exposure and analyzed data leaks 8. Gained basic hands on network configuration knowledge

1. Troubleshoot PC, laptop, and printer if any issues were to arises. 2. Setting up and preparing laptops for new hires as well as guiding them on the functionalities. 3. Configuring MAC address into wireless controller for wifi access 4. Replacing and repair damaged hardware for the users 5. Ensuring all assets recorded in the inventory (Manage Engine) are up to date. 6. Providing support to the end users based on requests such as setting up VPN (Okta) and installing necessary software (MS Office, PDXplorer, etc)