About Foo HeanTee

I have around 20 years of experience in IT, including more than 10 years in cybersecurity. I started in software testing before moving into security engineering, consulting, advisory, and identity security.

I enjoy solving technical problems, trying new technologies, and finding practical ways to improve security. I also like tinkering with technology, which is how I ended up building a home lab.

Areas of Expertise

• Identity Security: IAM, PAM, Active Directory, Microsoft Entra ID, identity governance
• Security Engineering: System hardening, security assessments, vulnerability management, endpoint protection
• Security Operations: Incident response, SIEM, security monitoring, runbooks and SOPs
• Application Security: Web and mobile application testing, secure application design
• Cloud Security: Microsoft 365, Google Workspace, AWS

Experience

Senior Expert, Global ICT Identity — ASMPT

August 2024 – Present

• Assessed and improved Active Directory security using PingCastle.
• Oversee the external service provider responsible for CyberArk PAM operations.
• Led the migration from USB code-signing tokens to a software-based solution.

Senior Security Engineer — Secretlab

February 2024 – August 2024

• Assessed the attack surface of the company and improved endpoint and Google Workspace security.
• Managed a password-spraying incident from initial alert through investigation, remediation, and final reporting.

Strategic Security Advisor — Proficio

February 2023 – February 2024

• Advised enterprise clients on security architecture and SIEM improvements.
• Presented security findings and recommendations during quarterly reviews with executives.

Assistant Lead Engineer — IHiS

July 2021 – February 2023

• Deployed Palo Alto Traps malware protection across a healthcare cluster.
• Established OS patch management processes and monthly compliance reporting.

Cyber Security Consultant, PAM Operations — Ensign InfoSecurity

October 2019 – June 2021

• Delivered CyberArk projects, from pre-sales and deployment to documentation.
• Administered privileged access solutions for government agencies.

IT Security Engineer — Jabil

December 2015 – September 2019

• Led the rollout of Okta single sign-on across Asian sites and implemented MFA for VPN access.
• Led the CyberArk PAM rollout and integrated Workday with Okta for automated account provisioning.
• Also handled application security testing, vulnerability management, and 24/7 security operations.

Earlier Experience

eSecurity Engineer — Seagate
January 2015 – December 2015

• Conducted web application security assessments and recommended fixes for vulnerabilities.

Software Test Engineer — Motorola Solutions
April 2005 – January 2015

• Tested software for professional two-way radio systems used in mission-critical communications.