Daryl Wong
Security Architecture | GRC | DevSecOps | AppSec | AWS
About
Focused on translating regulatory obligations into practical cloud controls, working across engineering teams and senior leadership. Grounded in cloud software engineering and technical leadership, bringing a pragmatic approach to compliance decisions and security architecture. Pursuing CISSP certification.
Skills
- Cloud SecurityVulnerability Management · DevSecOps · SBOM/SCA · CI/CD Pipeline Security · Incident Response · Cloudflare · Palo Alto Prisma Cloud · Veracode
- Governance, Risk & ComplianceEU Cyber Resilience Act (CRA) · K-ISMS · CIS · Vendor-neutral Risk Management
- Identity & Access ManagementCognito · Entra ID · OAuth
- Cloud ArchitectureAWS Batch · ECS · EKS · EventBridge · Lambda · SQS · Event-driven Architecture
- CI/CD & DeliveryAzure DevOps · Docker · Git · GitHub Actions
- Backend DevelopmentPython · TypeScript · JavaScript · Node · .NET/C# · REST APIs
- Frontend DevelopmentReact · Next.js · HTML · CSS
- Data Engineering & MLOpsPostgreSQL · DynamoDB · Amazon Kinesis · Redshift · SQL · NoSQL · Apache Airflow (MWAA) · MLflow
Languages
- EnglishNative speaker
- MandarinNative speaker
Experience
ACTIVE · ACTIVE
Lead Cloud Cybersecurity EngineerDyson
SingaporeTransferred internally to head the security function for Dyson's Connected Cloud department; covering security architecture, GRC, and incident response for the consumer IoT platform behind the MyDyson App.
show moreshow less
- Responsible for security architecture, governance, risk management, and incident response across a cloud-native IoT platform serving millions of connected devices on AWS
- Own the automated vulnerability gate that blocks deployments on high/critical findings across all engineering teams, with final authority on disputed results
- Building MCP-integrated agentic tooling to bring business context, design intent, and implementation together at the point of security review
Technical LeadDyson
SingaporeLed engineering delivery for the MLOps platform, working across ML research, product, and business functions to define and execute the platform roadmap.
show moreshow less
- Worked directly with B2B sales, product, and UX writers, including direct exposure to UX research sessions and conversations with pilot users to translate business intent into a platform roadmap
- Owned technical vision and roadmap for an MLOps platform on AWS Batch orchestrated through Apache Airflow (MWAA), serving ML engineering teams across image segmentation and anomaly detection
- Received five early-career engineers on rotation from across Dyson's global offices, bringing them into the team's regular delivery cadence
Senior Cloud Software EngineerDyson
SingaporeCross-functional engineer focused on accelerating delivery, improving developer experience, and embedding security practices across the team.
show moreshow less
- Served as Security Champion; conducted architecture reviews and triaged SAST/SCA findings to shift security left in the development cycle
- Selected by department leadership to brief the CTO on the Cloud team's operational posture, covering distributed log ingestion, BDD-driven test automation (Cucumber.js), and CI/CD pipeline health
- Led the refactor of an internal integration testing framework in TypeScript, cutting execution time by ~75% with Azure Pipelines integration
- Established artefact tracking for an unstructured dataset of over 2 million image frames
- Conducted over 15 interviews and refreshed onboarding materials, reducing new-hire ramp-up time to 2 weeks
- Drove cross-team adoption of observability tooling (AWS X-Ray) for end-to-end visibility
Cloud Software EngineerDyson
SingaporeDeveloped and maintained microservices and RESTful APIs supporting millions of IoT devices, alongside ETL pipelines for sensor data
show moreshow less
- Collaborated with senior engineers on the design and implementation of RESTful APIs and data pipelines
- Prototyped an MLOps pipeline on EKS using Kubeflow for proof-of-concept evaluation
Graduate Software EngineerDyson
SingaporeYear-long rotation programme across Dyson's Cloud, Embedded Systems, and Robotics software teams.
show moreshow less
- Co-organised Dyson's inaugural 4-day global software technical conference — 600+ attendees, 20 events, 15 speakers across Singapore and the UK
- Delivered early-stage architecture and database design for a high-traffic (>300 RPS) service
- End-to-end development across embedded and vision systems through to cloud integrations for the MyDyson App
InternEnsign Infosecurity
SingaporeSecurity Operations Centre (SOC) analyst handling customer-facing incident response and security testing.
show moreshow less
- Performed customer-facing incident response for potential denial-of-service attempts, including analysis of SIEM alerts in a Security Operations Centre
- Conducted penetration testing of in-house customer-facing systems using Burp Suite and Metasploit
- Migrated SOC automation scripts from Python 2.x to Python 3.x
Projects
Gateway to more experimentation and tinkering
- Hosted using Cloudflare Workers
- Astro with JSON Resume schema
- Astro
- Claude Code
- Cloudflare Workers
- Github Actions
- JSON Resume
Personal playground where it all started
- Cisco ISR, Ubiquiti PoE Switches & APs
- IoT VLAN Segregation
- Cisco
- Home Assistant
- Networking
- Proxmox
- Ubiquiti
Education
University of Melbourne
Computing and Software Systems
Skills
Cloud Security (Vulnerability Management, DevSecOps, SBOM/SCA, CI/CD Pipeline Security, Incident Response, Cloudflare, Palo Alto Prisma Cloud, Veracode) · Governance, Risk & Compliance (EU Cyber Resilience Act (CRA), K-ISMS, CIS, Vendor-neutral Risk Management) · Identity & Access Management (Cognito, Entra ID, OAuth) · Cloud Architecture (AWS Batch, ECS, EKS, EventBridge, Lambda, SQS, Event-driven Architecture) · CI/CD & Delivery (Azure DevOps, Docker, Git, GitHub Actions) · Backend Development (Python, TypeScript, JavaScript, Node, .NET/C#, REST APIs) · Frontend Development (React, Next.js, HTML, CSS) · Data Engineering & MLOps (PostgreSQL, DynamoDB, Amazon Kinesis, Redshift, SQL, NoSQL, Apache Airflow (MWAA), MLflow)