Derrick Song

Background

About Derrick Song

Derrick fights bad guys on the internet. He spends his spare time sharpening digital weapons, delivering Messages to Garcia, writing documentation, doing the needful and practicing the Socratic method. He is a proponent of automation in general and enjoys learning about modern software applications and architecture. Fancy names for some of the things he's experienced • Cyber Security • Cloud Security • Vulnerability Management • Security Operations / Engineering • Security Automation • Security Infrastructure / Architecture • Incident Handling / Response • Intrusion Analysis / Forensics • Application Security • Web Application Testing • Penetration Testing • Threat Intelligence • ISO 27001, PCI, MPAA, CIS, CSA STAR Compliance Frameworks • CI/CD Pipeline Security • Agile SDLC • SecDevOps / DevSecOps • AWS-Native Security Solutions: CloudWatch, CloudTrail, IAM, Lambda, Inspector, GuardDuty, SecurityHub • Serverless Development In the • DEFCON 31, Blue Team Village: More Scanners, More Problems: Vulnerability Management at Scale (Aug. 2023) • KTLA 5 News: Staying Secure on Public WiFi Hotspots (Feb. 2016) • Cloud Security Alliance (Los Angeles): Integrating AWS-Hosted Applications with PCI-compliant Networks (Jun. 2017) • GuardSight Engineering Day: Covert Operations Modular Reconnaissance and Detection (C.O.M.R.A.D.)(Aug.