×
Cassie Chong

Cassie Chong

Penetration Tester

Singapore, SG
English, Chinese

Background


About

About

Penetration tester with two years of experience at EY Singapore, delivering mobile, web application and API VAPT services for clients in financial and other regulated sectors. Trained at SUTD in security, IoT and intelligent systems with a minor in AI. OSCP+/OSCP and CREST Registered Tester (CRT) certified. Looking to move beyond assessment into deeper, hands-on technical security work.

Work Experience

Work Experience

  • Offensive Security Consultant, Ernst & Young

    Jul, 2024 - Present

    Conduct vulnerability assessments and penetration testing services for global enterprise clients and local clients across financial services, industrial, and technology sectors.

    • Tested authentication, MFA and business logic controls in high-value flows, covering server-side validation gaps

    • Bypassed rate limiting, input validation and upload controls through payload crafting

    • Maintained communication with stakeholders involved throughout engagements, keeping them updated on progress

    • Reported each finding with CVSS scoring and associated recommendation, transating exploit chains into concrete business impact

    • Retested fixes with client dev teams post-remediation

  • Research Intern, A*STAR

    Feb, 2023 - Aug, 20236 months

    Conducted applied-cryptography research on efficient computation over encrypted data using homomorphic encryption schemes.

    • Implemented and tested homomorphic encryption operations on encrypted integers in C++, using the HElib and NTL libraries

    • Researched efficient operations on encrypted integers based on homomorphic encryption schemes, extending university-level cryptography and discrete math foundations into an active research problem

    • Collaborated with multidisciplinary researchers including pure mathematicians in a professional research environment

  • Undergraduate Teaching Assistant, Singapore University of Technology and Design (SUTD)

    May, 2023 - Aug, 20233 months

    Supported undergraduate students in a core Computer Science module while deepening personal technical foundations in Operating Systems and Networking.

    • Ran lab sessions and supported students; inspired the creation of a new lab exercise adopted into the curriculum to enhance practical learning

Skills

Skills

  • Web App VAPT

    Burp Suite

    API testing

  • Mobile App VAPT

    Android

    iOS

    iPadOS

    Frida

    Objection

    MobSF

  • Scripting & Automation

    Bash

    Python

  • Network/Infra security

    Port scanning

    Service fingerprinting

    Nmap

    Rustscan

Education

Education

  • Bachelor of Engineering, Computer Science and Design - Security, IoT and Intelligent Systems track; Minors in Artificial Intelligence and Digital Humanities, Singapore University of Technology and Design (SUTD)

    Sep, 2020 - May, 2024

  • Computer Science, Fall 2022 Exchange Program, University of Maryland

    Aug, 2022 - Dec, 2022

Certificates

Certificates