Hey! I am

Richard Fan

I'm a

About

About Me

  • Name: Richard Fan
  • Email: richardfan1126@gmail.com
  • Location: Hong Kong


Richard is a Security Engineer at ExpressVPN, and an AWS Security Hero.

He is dedicated to helping people easily adopt AWS, supporting them with moving workloads to AWS, promoting best practices, and streamlining cloud governance. Richard's experience over the years has allowed him to focus more on making security on the cloud easy.

Richard's current focus is on cloud governance, and data protection. He has been an active contributor to AWS Nitro Enclaves, a trusted execution environment offering on AWS.

Education

2010-2013

Bachelor of Science in Computer Science

The Chinese University of Hong Kong

Experience

2022 - Present

Security Engineer

ExpressVPN

  • Troubleshooting security problems
  • Assist in the management and deployment of security products on endpoints, servers and virtual desktops
  • Design, operate and maintain a vulnerability management program
  • Assist the Security Team in responding to and remediating system and/or network security breaches
  • Plan, implement, manage, monitor and upgrade security measures for the protection of the organization's data, systems, and networks
  • Ensure that the organization's data and infrastructure are protected by enabling the appropriate security controls
  • Plan, create and implement cybersecurity processes and policies
  • Engage in domain-specific threat modelling and attack surface analysis/reduction
  • Identify information and logs to monitor, then design and engineer the process for gathering that information
  • Promotes best practices and design patterns

2020 - 2022

Cloud Engineer

GrowthOps

  • Manage AWS infrastructures for financial institutions
  • Building CI/CD pipeline and production deployment (AWS CodePipeline, TeamCity, etc.)
  • Identify and resolve infrastructure/application vulnerabilities, ensuring it meets compliances (Qualys, SonarQube, Horangi Warden, etc.)
  • Setup automations for continuous monitoring and remediation (e.g. AWS Config, Server patch automation, regular database optimisation, etc.)
  • Monitor and response to incidents on production environment

2015 - 2020

Solutions Architect

BuzzPoem Limited

  • Architect and deploy cloud solutions for clients’ project requirement.
  • Redesign existing systems into micro-services, container-based / serverless architecture, utilizing AWS Lambda, API Gateway, etc.
  • Setup monitoring systems for existing deployments, automate recovery process. Utilizing AWS CloudWatch, Config, SSM.
  • Establish CI/CD into internal development process, utilizing Ansible, Jenkins, AWS CodePipeline, CodeBuild, CodeDeploy.
  • Review existing development process and promote best practices, e.g. deployment config, application logic, team collaboration, etc.

2014 - 2015

Web Developer

Appprof Limited

  • Develop websites for different client, including Cinema, customised mobile cace manufacturer, e-commerce.
  • Build CMS system for clients’ websites

Skills

Software Development
Amazon Web Services (AWS)
Serverless
DevOps
Cloud Architecture design
Cloud Security

Certifications

Jan 2022

Offensive Security Certified Professional (OSCP)

View Credential
Aug 2021

Certificate of Cloud Security Knowledge (CCSKv4)

View Credential
Jul 2021 - Jul 2024

Certified Ethical Hacker (CEH)

View Credential
Apr 2021 - Apr 2024

CompTIA Security+

View Credential
Mar 2021 - Mar 2024

CKA: Certified Kubernetes Administrator

View Credential
Mar 2021 - Mar 2023

CKS: Certified Kubernetes Security Specialist

View Credential
Mar 2021 - Mar 2023

HashiCorp Certified: Terraform Associate

View Credential
Dec 2020 - Dec 2023

AWS Certified Security - Specialty

View Credential
Jan 2021 - Jan 2024

AWS Certified Machine Learning - Specialty

View Credential
Feb 2022 - Feb 2025

AWS Certified DevOps Engineer - Professional

View Credential
Feb 2020 - Feb 2023

AWS Certified Solutions Architect - Professional

View Credential
Feb 2019 - Feb 2023

AWS Certified Solutions Architect - Associate

View Credential
Mar 2019 - Feb 2025

AWS Certified Developer - Associate

View Credential
Sep 2020 - Sep 2023

AWS Certified Cloud Practitioner

View Credential
Aug 2020 - Aug 2023

Microsoft Certified: Azure Administrator Associate

View Credential
Mar 2022 - Mar 2024

Atlassian Certified in Managing Jira Projects for Cloud

View Credential
Mar 2019 - Mar 2024

Certified ScrumMaster (CSM)

View Credential

Blog

My Blog

I like exploring new things. What's more, I love to share the difficulties I encountered and the experiences of things I have learned.

Contact

Contact Me