CHRIS WONG - IT SECURITY OPERATIONS ANALYST

chriswong0621@gmail.com · 5943 2006 · reume.maruwtc.com · github.com/maruwtc · linkedin.com/in/chriswongtc

SUMMARY

CHRIS WONG

IT Security Operations Analyst · Hong Kong

  • 6+ years across security operations, networking, infrastructure, and application development.
  • Experienced in SIEM, EDR, DLP, vulnerability management, and enterprise control assessments against financial-sector regulatory requirements (HKMA TM-E-1 and applicable SFC cybersecurity requirements).
  • Works to established security standards and frameworks: ISO 27001, CIS Benchmarks, MITRE ATT&CK, and NIST AI RMF.
  • Builds security automation and enterprise AI knowledge solutions, translating technical initiatives into Board-level business cases and measurable operational value.

EXPERIENCE

SENIOR IT SECURITY OPS ANALYST

iFAST Hong Kong Holdings Limited · Mar 2026 - Present

  • Security operations owner for the Hong Kong region: control effectiveness, risk prioritization, incident coordination, regulatory alignment, and stakeholder reporting.
  • Led enterprise security audits across systems and infrastructure, assessing compliance with HKMA TM-E-1 and applicable SFC cybersecurity requirements; aligned controls with ISO 27001 and coordinated remediation with control owners.
  • Directed security risk assessments with project owners and stakeholders across business models, operational processes, data flows, and critical dependencies; prioritized material control gaps into risk-aligned remediation plans.
  • Translated technical vulnerabilities into business-risk reports for senior stakeholders and coordinated cross-functional response teams during complex security evaluations.
  • Supervise and mentor junior analysts and interns across security operations, vulnerability research, SIEM, and automation; review deliverables and run structured knowledge transfer.
  • Designed SecOps GPT, a company-wide RAG knowledge platform using OpenRouter, hybrid retrieval, and reranking, making internal expertise searchable and reusable across departments.
  • Presented SecOps GPT to the Board with a business case built on faster knowledge transfer, reduced key-person dependency, and ROI measured by expert hours saved against fully loaded salary cost.

IT SECURITY OPERATIONS ANALYST

iFAST Hong Kong Holdings Limited · Sep 2023 - Feb 2026

  • Optimized detection logic across Elastic SIEM and CrowdStrike Falcon EDR, reducing false positives and improving alert triage speed and quality.
  • Administered and tuned Forcepoint and Trellix DLP, Akamai WAF, endpoint security, secure web gateway, and anti-malware platforms; investigated policy events and coordinated exception handling.
  • Owned end-to-end vulnerability management: Tenable assessment, risk-based prioritization, remediation tracking, and coordination with system owners through closure.
  • Conducted internal penetration testing and Red Team simulations mapped to OWASP WSTG and MITRE ATT&CK, documenting findings and driving remediation with application and infrastructure teams.
  • Led incident triage and root-cause analysis for high-priority events across Akamai WAF, Falcon EDR, Forcepoint DLP, and Trellix SWG / ENS / DLP.
  • Produced threat intelligence and vulnerability advisories, operational dashboards, and management reports covering emerging risks, control performance, and remediation priorities.

SYSTEM ENGINEER

NEC Hong Kong Limited · Mar 2022 - Jul 2023

  • Implemented and managed SD-WAN and site-to-site IPsec VPN deployments.
  • Maintained network firewalls, routers, and switches.
  • Supported IT security auditing and daily office operations.

IT SUPPORT OFFICER

TAS Services Limited · Dec 2020 - Jan 2022

  • Managed NGFW, infrastructure, and networks.
  • Supported users and daily office operations.

ENGINEER

HKT · Sep 2019 - May 2020

  • Delivered the Windows 7 to Windows 10 migration for the HKSAR Home Affairs Department.

PROJECTS

SECOPS GPT

Self-initiated @ iFAST

  • Company-wide RAG knowledge assistant built with Next.js, Flask, OpenRouter, hybrid retrieval, and reranking to ground answers in internal policies and operational knowledge.
  • Presented to the Board as a knowledge-transfer capability; linked reduced key-person dependency and expert hours saved to fully loaded salary cost.

SCREENSHOT BLOCKER

Self-initiated @ iFAST · github.com/maruwtc/screenshot-blocker

  • Windows background service using low-level API hooks to block screenshots and common capture shortcuts.
  • Strengthens DLP controls in restricted environments.

BROWSER2ELK

Self-initiated @ iFAST

  • Browser-telemetry pipeline streaming browsing and download events into the Elastic Stack.
  • Powers threat hunting, user-behavior analytics, and data-exfiltration detection.

CCTV DETECTION

Self-initiated @ iFAST

  • AI-assisted restricted-area monitoring using VLM, YOLOv11, and motion detection to flag suspicious or DLP-relevant activity.
  • Cut detection false positives by over 40% through frame differencing and custom-trained object detection.
  • Presented the prototype to senior management and compliance for a multi-office pilot.

CCTV HEALTH MONITORING

Self-initiated @ iFAST

  • Automated CCTV health and retention validation through Hikvision ISAPI, Flask services, live-view checks, and playback verification.
  • Delivered automated dashboards and management reporting, reducing CCTV downtime by over 30%.

SKILLS

GOVERNANCE

Regulatory, standards & frameworks

  • Regulatory & Compliance: HKMA TM-E-1, applicable SFC cybersecurity requirements, technology risk management.
  • Standards & Frameworks: ISO/IEC 27001, CIS Benchmarks, NIST AI RMF, MITRE ATT&CK.
  • Application Security: OWASP WSTG, OWASP GenAI, Burp Suite.

SECURITY OPERATIONS

Detect, respond, remediate

  • EDR: CrowdStrike Falcon, Trellix HX.
  • SIEM: Elastic.
  • DLP: Forcepoint, Trellix.
  • Vulnerability Management: Tenable.
  • WAF: Akamai.
  • Anti-Virus: Trend Micro, Trellix ENS, Qi An Xin.

BUILD & AUTOMATE

Engineering & research

  • DevSecOps: CI/CD security (GitLab CI).
  • Programming: Go, Python, TypeScript.
  • Frameworks: Next.js, Node.js, Gin, Flask, React Native.
  • AI & Security Research: LLMs, model training (Ultralytics), RAG (reranking, indexing).

EDUCATION

BSc (Hons), COMPUTING

Coventry University · 2023 - 2024

  • Final Year Project: Penetration Testing Improvement and Automation.

ADVANCED DIPLOMA

HKU SPACE · Computer and Information Security · 2021 - 2023

  • Individual Project: Database Assessment Automation.

CERTIFICATIONS

Badges earned

  • Blue Team Level 1 (BTL1) - Junior Defensive Cybersecurity.

CONTACT

GET IN TOUCH

Hong Kong

  • Email: chriswong0621@gmail.com
  • Phone: 5943 2006
  • Portfolio: reume.maruwtc.com
  • GitHub: github.com/maruwtc
  • LinkedIn: linkedin.com/in/chriswongtc
  • Use the links below to reach out or download the full resume file.
Download the full resume
CHRIS WONGIT SECURITY OPERATIONS ANALYST
AREAS 0/6

8-BIT RESUME

CHRIS WONG

IT SECURITY OPERATIONS ANALYST


MOVE: MOUSE CLICK / ARROWS / WASD

READ: A / ENTER

BACK: B / ESC

PRESS START TO BEGIN

MARU-BITRESUME SYSTEM