Thong Huynh

About Thong Huynh

Cloud security engineer with a strong foundation in Linux system administration, enterprise networking, and automation. I focus on building secure, reliable, and observable systems across on-prem and cloud environments.I transitioned into IT after years in agriculture and construction, bringing operational discipline, risk awareness, and hands-on problem solving into system and network operations.My experience includes Azure and AWS infrastructure, Linux and Windows servers, identity and access management, security operations, and network troubleshooting. I have worked with routing and switching, DNS, VLANs, firewalls, TCP/IP traffic, SSH/RDP access, and hybrid cloud connectivity, as well as Azure Virtual Machines, VNets, NSGs, Microsoft Sentinel, Azure Monitor, Log Analytics, and Entra ID.I build and document enterprise-style projects focused on observability, security monitoring, compliance, and Infrastructure as Code.Core skills include Linux (RHEL, Rocky, Ubuntu), Azure and AWS, enterprise networking fundamentals, Ansible and Terraform, and SIEM and monitoring platforms. I hold a BS in Information Technology with RHCE, RHCSA, CCNA, AWS SAA, AZ-104, AZ-500, Security+, CySA+, and ITIL v4.Recently, I\'ve been honing my skills as a cyber security analyst at Logn Pacific. I worked with end users, troubleshooting cloud workloads, Nessus vulnerability management, STIG hardening, Microsoft Defender for Endpoint EDR, and Sentinel SIEM. Threat hunting is my new favorite hobby. Portfolio: GitHub: https://github.com/Thuynh808

Experience

1. Cybersecurity Analyst

   Log N Pacific

   Feb 2026 — Present

   Vulnerability Management- Conducted enterprise vulnerability scans using Nessus/Tenable across Windows and Linux systems- Reduced critical vulnerabilities to 0%, high by 90%, and medium by 76% through prioritized remediation- Performed DISA STIG compliance assessments and secure configuration validation- Automated remediation workflows using PowerShell and scriptingThreat Hunting & Detection Engineering- Performed proactive threat hunts using Microsoft Defender for Endpoint, Sentinel, and Log Analytics- Investigated brute force activity, data exfiltration attempts, and ransomware-related behaviors- Developed KQL-based queries to identify attacker patterns and lateral movement- Created custom Defender detection rules and Sentinel dashboards to improve response visibility- Engineered and published structured threat hunt scenarios for incident response exercisesCurrently expanding into Linux-based adversary simulation and threat hunt engineering.

Education

• Leveld Careers

  Cyber Security Masterclass

  2023