Van Truong TranSecurity Operations
Tiếng ViệtContact
Menu

Van Truong Tran

Security Operations Engineer focused on AI-driven security automation.

I turn threat intelligence into validated hunts, detections, and security controls with an offensive-security mindset.

Ho Chi Minh City, Vietnam

Onsite or hybrid full-time in Vietnam; remote for relevant international freelance work.

Explore experienceContact me
GitHubLinkedIn
  1. Threat Intelligence

    Collect and organize evidence that can guide security decisions.

  2. Evidence-grounded Enrichment

    Normalize and enrich security information while preserving provenance.

  3. Human Validation

    Keep evidence review and accountable decisions in the workflow.

  4. Threat Hunting

    Turn intelligence into focused and reviewable hunting questions.

  5. Detection Engineering

    Translate validated behavior into maintainable detection logic.

  6. Security Controls

    Validate how preventive and detective controls behave in practice.

  7. Offensive Validation

    Use offensive-security research to challenge assumptions and controls.

  • Threat IntelligenceEvidence-grounded Enrichment: Signals gain context and provenance.
  • Evidence-grounded EnrichmentHuman Validation: Enriched output reaches human validation.
  • Human ValidationThreat Hunting: Validated intelligence scopes investigation.
  • Threat HuntingDetection Engineering: Confirmed behaviors inform detections.
  • Detection EngineeringSecurity Controls: Detections support defensive-control validation.
  • Offensive ValidationHuman Validation: Adversarial findings enter the same human gate.
  • Offensive ValidationDetection Engineering: Validated techniques can inform defensive coverage.
  • Security ControlsHuman Validation: Control results return to a human decision.

Threat Intelligence

Collect and organize evidence that can guide security decisions.

  • Threat Intelligence → Evidence-grounded Enrichment: Signals gain context and provenance.
Threat Intelligence

Career Timeline

  1. Computer and Information Systems Security/Information Assurance
  2. Google Cybersecurity Professional Certificate
  3. Security Researcher Intern
  4. Web Penetration Testing
  5. Security Operations Engineer Intern
  6. Foundation Level Threat Intelligence Analyst
  7. Certified LLM Security Professional (CLLMSP)

Experience

Security Operations Engineer InternTrusting SocialMay 2026 — Present

Ho Chi Minh City, Vietnam; onsite

Security operations work spanning control validation, threat intelligence, hunting, and endpoint detection.

  • Contributed to Zero Trust and DLP control validation.
  • Worked on automated threat-intelligence ingestion and evidence-grounded enrichment.
  • Supported intel-first hunting and macOS and Jamf detection engineering.
Security Researcher InternUniversity of Information TechnologyJun 2025 — Oct 2025

Offensive-security research focused on structured, human-reviewed penetration-testing workflows.

  • Researched LLM-assisted multi-stage penetration-testing workflows.
  • Covered reconnaissance, vulnerability discovery, and exploitation research.

Projects & Research

Zero Trust & DLP Control ValidationExperience validating security controls against expected behavior.
  • Evaluated Zero Trust and data-loss-prevention control behavior.
  • Contributed evidence collection and review-ready observations.
  • Policy-path validation and controlled security testing.
  • Supported clearer decisions about control behavior.
Automated Threat Intelligence WorkflowsExperience building repeatable workflows for analyst-ready threat intelligence.
  • Developed automated threat-intelligence ingestion and enrichment workflows.
  • Contributed normalization, provenance checks, and human review steps.
  • Scheduled ingestion, structured normalization, and evidence-grounded enrichment.
  • Supported more consistent preparation of security information.
Intel-first Threat HuntingExperience using threat intelligence to frame focused hunting work.
  • Translated approved intelligence into scoped hunting questions.
  • Connected evidence, hypotheses, and analyst validation.
  • Intelligence-led hypothesis development and evidence review.
  • Supported more focused investigation paths.
macOS & Jamf Detection EngineeringExperience developing reviewable endpoint detection logic.
  • Worked with macOS telemetry and Jamf-oriented detection engineering.
  • Contributed behavior analysis and detection review.
  • Endpoint telemetry analysis and detection-as-code practices.
  • Supported maintainable endpoint visibility.
LLM-assisted Multi-stage Pentesting ResearchResearch into structured LLM assistance across penetration-testing stages.
  • Explored LLM-assisted reconnaissance, vulnerability discovery, and exploitation research.
  • Kept human review and evidence checks between stages.
  • Prompted research workflows with explicit validation gates.
  • Supported a more structured way to evaluate assisted security research.

Tech Stack

Security Operations & Controls

Operational security work tied to control behavior.

Threat Intelligence & Hunting

Evidence preparation and intelligence-led investigation.

Detection & Endpoint

Endpoint evidence and maintainable detection work.

AI/LLM Security Automation

Evidence-grounded assistance with human validation gates.

Offensive Security

Research across reconnaissance, vulnerability discovery, and exploitation.

Engineering & Delivery

Tools for repeatable security engineering workflows.

Credentials

Computer and Information Systems Security/Information Assurance

University of Information Technology

Google Cybersecurity Professional Certificate

Coursera

Web Penetration Testing

CyberJutsu Academy

Foundation Level Threat Intelligence Analyst

arcX

395446bfd6488c1bd913ca850bc388df7a52487d

Certified LLM Security Professional (CLLMSP)

Red Team Leaders

Ask My Portfolio

The portfolio assistant is awaiting provider configuration. The suggestions remain available as browsing prompts.

Example questions

  • Which experience best demonstrates Van's security automation work?
  • What pentesting and offensive-security experience does Van have?
  • How has Van used LLMs in security workflows?
  • What detection and endpoint work has Van done?
  • What work arrangements is Van open to?
  • How can I contact Van?
Contact Van directlytruongvtrpaul@gmail.com

Contact

Get in touch about security operations roles or relevant international freelance work.

Onsite or hybrid full-time in Vietnam; remote for relevant international freelance work.

Ho Chi Minh City, Vietnam

truongvtrpaul@gmail.comGitHubLinkedIn