AV / PORTFOLIO
An auto-playing dinosaur jumps over cacti and ducks under birds

CYBERSECURITY / CLASS OF 2027

ANDREW VU

Andrew Vu smiling outdoors
Download full résumé PDF

I write about cloud technology on Hashnode

SUMMARY

Cybersecurity student with a strong practical mindset, bringing hands-on experience in vulnerability analysis; incident response for both cloud-based and on-premises applications; cloud computing; secure service architecture; penetration testing; and threat modeling. Driven to build security automation workflows alongside human judgment, creativity, and critical thinking, driving profitability while protecting the reputations of the companies I work with.

PROFESSIONAL CERTIFICATIONS

  • Certified Kubernetes Administrator (CKA)Aug 2026
    Certified Kubernetes Administrator (CKA) certificate
  • Amazon Cloud Red Team Professional (ACRTP) – Pwned LabsFeb 2026
    Amazon Cloud Red Team Professional (ACRTP) - Pwned Labs certificate
  • Amazon Web Services Certified Developer – AssociateFeb 2026 – Feb 2029
    Amazon Web Services Certified Developer - Associate certificate
  • Amazon Web Services Solutions Architect – AssociateJul 2025 – Jul 2028
    Amazon Web Services Solutions Architect - Associate certificate
  • Amazon Web Services Cloud PractitionerMar 2025 – Feb 2029
    Amazon Web Services Cloud Practitioner certificate
  • TestOut Linux ProIssued Nov 2024Credential ID: 6-2C6-VKJAG7
Verify on Credly

EXPERIENCES

Point North Network Inc

IT Security InternJune 2026 - Present

Inner Grove, MN, United States

  • Collaborated with a security engineer to handle security alerts and vulnerability analysis across SentinelOne and Datto RMM for 30+ corporate clients, and co-researched and tested new security stacks for the organization
  • Co-authored security monitoring standards and baseline configuration documentation, including CIS benchmark checks for organizations and clients' Microsoft 365 and Active Directory environments
  • Developed security automation workflows in Rewst to streamline vulnerability remediation and alert triage, reducing manual overhead and false positives for the security team by automating checks and patch-failure diagnostics by 90%
  • Built a vulnerability management program for clients, visualized using Rewst, PowerShell, and DevOps practices

Maxcess International

IT Security Analyst InternMay 2025 - Sep 2025

Neenah, WI, United States

  • Collaborated with the Security Manager and global IT teams to secure enterprise environments with 2,000+ Active Directory devices
  • Triaged and resolved 500+ security incidents using Arctic Wolf, including phishing, malware, and suspicious activities
  • Triaged vulnerabilities and performed asset analysis using Data Explorer and Axonius, collaborating with the Cisco Meraki firewall team and cross-departmental teams to implement preventative security controls for true-positive attacks
  • Developed AI-assisted phishing detection workflows for encoded HTML and QR-code–based attacks missed by Proofpoint, reducing investigation time by over 50% and strengthening threat analysis

University of Wisconsin-Stout

Computer Networking Teaching AssistantAug 2024 - May 2025

Menomonie, WI, United States

  • Assisted the professor in grading networking labs for 40+ students on routing protocols, subnetting, and security hardening
  • Researched and optimized the connection between an on-premises system and a cloud environment using AWS architecture best practices

HONORS & AWARDS

Amazon Web Services Student Builder Group Leader (Nov 2025 – Nov 2026 | Gold Level)

Founding leader of the UW–Stout campus chapter (13% acceptance rate globally); hosted events and closed the knowledge gap in cloud technology for students.

fwd:cloudsec (2025)

Selected as one of eight recipients nationwide to receive a scholarship to attend the largest and most reputable cloud security conference in the United States

Cloud Village CTF

6th place at BSidesSF & RSA (2026), and 2nd place at RSA Conference (2025)

Collegiate Cyber Defense League (CCDL)

Achieved 1st place in Wisconsin and Top 5 Midwest Region (2025) in Collegiate Cyber Defense Competition (CCDC)

PROJECTS

Cloud, Web, AI Security Capture The Flag (CTF) Creator - UW-Stout

  • Developed cloud computing, web security, and AI security challenges for the semesterly competition; delivered a practical and comprehensive cloud security challenge focused on cloud infrastructure (Azure and AWS), including IAM role lateral movement, misconfigured role abuse, prompt injections, and red team techniques on a cloud-hosted platform.
Cloudy Shop CTF architectureAnimated GIF
Fit
Cloudy Shop CTF architecture drawn by Andrew Vu, showing AWS and Google Cloud services, application components, roles, and challenge paths.

Fit the whole diagram, or zoom in and scroll or drag to explore.

AWS IAM Privilege Escalation Mapper Cloud Security Project

  • As capstone project leader, led a team of 5. Built an IAM permission threat mapping tool leveraging ListRoles and ListPolicies to validate trust identities, automate AssumeRole checks, and reduce manual testing across organizations with numerous roles.
  • Enabled multi-account checks with filters for customer-managed roles and visualized results via an interactive Neo4j dashboard to improve visibility into IAM risks.

View project on GitHub

Figure 1: Architecture of the application
Figure 2: Scenarios for Role Chaining
Figure 3: Node Depth Layers
Figure 4: Visualization of a successful discovery

DevOps Power Pipeline — Fully Automated CI/CD For Flask

  • Architected and implemented a complete CI/CD pipeline using AWS CodePipeline to automate the deployment of a Flask application to AWS Elastic Beanstalk.
  • Configured automated build and testing processes that trigger immediately upon code commits to GitHub, and integrated a mandatory manual approval gateway to ensure managerial review prior to final production deployment.
Figure 1: Cloud Development Kit Infrastructure
Figure 2: Back-end Application First Idea
Figure 3: Improvement for Back-end Application
Project Implementation Details PDF

View additional project materials on Google Drive

Kubernetes The Hard Way In progress

In-progress Kubernetes project. I created this architecture diagram to map the control plane, worker nodes, container runtime, networking, and image registry.

Kubernetes architectureAnimated GIF
Fit
Kubernetes architecture drawn by Andrew Vu, showing the control plane, API server, etcd, scheduler, worker nodes, container runtime, networking, and image registry.

Fit the whole diagram, or zoom in and scroll or drag to explore.

EDUCATION

UNIVERSITY OF WISCONSIN - STOUT

Menomonie, WI, United States

Bachelor of Cybersecurity
(GPA: 3.9/4.0)

Graduating: May 2027

Download unofficial transcript PDF

SKILLS

AWS

Cloud & security
Identity & Permissions

Identity & Permissions

Services
  • IAM
  • STS
Capabilities
  • sts:AssumeRole
  • iam:PassRole
  • Role chaining
  • Cross-account access
  • Trust policies
  • Permission boundaries
  • Least privilege
Authentication

Authentication

Services
  • Cognito
Capabilities
  • User Pools
  • Identity Pools
  • JWT
  • Temporary credentials
Related projectCloudy Shop CTF
Secrets & Encryption

Secrets & Encryption

Services
  • Secrets Manager
  • KMS
  • SSM Parameter Store
Capabilities
  • Secret storage
  • Secret rotation
  • Encryption
  • Access controls
Related projectCloudy Shop CTF
Compute & Serverless

Compute & Serverless

Services
  • EC2
  • Lambda
  • Elastic Beanstalk
  • API Gateway
Capabilities
  • Execution roles
  • Event triggers
  • Application deployment
Storage & Databases

Storage & Databases

Services
  • S3
  • DynamoDB
  • EBS
Capabilities
  • Bucket policies
  • Versioning
  • Encryption
  • Snapshots
Related projectCloudy Shop CTF
Networking

Networking

Services
  • VPC
Capabilities
  • Public & private subnets
  • Route tables
  • Security Groups
  • NACLs
  • NAT Gateway
CI/CD & Infrastructure

CI/CD & Infrastructure

Services & tools
  • CodePipeline
  • CodeBuild
  • AWS CDK
  • CloudFormation
Capabilities
  • Automated testing
  • Staging environments
  • Manual approval
  • Production deployment
Monitoring & Auditing

Monitoring & Auditing

Services
  • CloudWatch
  • CloudTrail
  • SNS
Capabilities
  • Logs & metrics
  • Alarms
  • API activity auditing
  • Notifications

Kubernetes & Containers

CKA
Workloads

Workloads

Resources
  • Pods
  • Deployments
  • ReplicaSets
  • StatefulSets
  • DaemonSets
  • Jobs
  • CronJobs
Capabilities
  • Workload management
  • Replica management
  • Batch workloads
Related projectKubernetes The Hard Way In progress
Networking

Networking

Resources & components
  • Services
  • Ingress
  • CoreDNS
  • CNI
  • NetworkPolicies
Capabilities
  • Service discovery
  • Traffic routing
  • Network isolation
Related projectKubernetes The Hard Way In progress
Configuration

Configuration

Resources
  • ConfigMaps
  • Secrets
Capabilities
  • Environment variables
  • Volume mounts
  • Application configuration
Related projectKubernetes The Hard Way In progress
Storage

Storage

Resources
  • PersistentVolumes
  • PersistentVolumeClaims
  • StorageClasses
Capabilities
  • Persistent storage
  • Dynamic provisioning
  • Volume access modes
Related projectKubernetes The Hard Way In progress
Access & Security

Access & Security

Resources & concepts
  • RBAC
  • Roles
  • ClusterRoles
  • RoleBindings
  • ServiceAccounts
  • Security contexts
Capabilities
  • Access controls
  • Workload identity
  • Least privilege
Related projectKubernetes The Hard Way In progress
Scheduling & Resources

Scheduling & Resources

Concepts
  • Taints & tolerations
  • Node affinity
  • Resource requests & limits
  • Autoscaling
Capabilities
  • Pod placement
  • Resource allocation
  • Workload scaling
Related projectKubernetes The Hard Way In progress
Troubleshooting & Operations

Troubleshooting & Operations

Tools & concepts
  • kubectl
  • Logs & events
  • Health probes
Capabilities
  • Rollout & rollback
  • Cordon & drain
  • etcd backup & restore
  • Cluster troubleshooting
Related projectKubernetes The Hard Way In progress
Packaging & Images

Packaging & Images

Tools
  • Helm
  • Docker
  • ECR
Capabilities
  • Helm charts
  • Values files
  • Container images
  • Image registries
Related projectKubernetes The Hard Way In progress

Security toolkit

  • Kali Linux
  • Burp Suite
  • OWASP Top 10
  • Metasploit Framework
  • Wireshark

Programming & tooling

  • Python
  • Bash
  • Java
  • JavaScript
  • Git
  • Terraform
  • Azure

ANDREW VU / CLOUD TECHNOLOGY

BLOG

I write about cloud technology. You can find my current articles on Hashnode.

CURRENT WRITING

Cloud technology

Read my latest writing on Hashnode.

redcloud.hashnode.dev

Read on Hashnode

Architecture

Fit
Architecture diagram

Zoom in for detail, or use Fit diagram to see the complete architecture. Press Escape to close.