# Curriculum Vitae — Trịnh Hoàng Tú

Cybersecurity Student & Software Engineer specializing in Backend (ASP.NET Core, FastAPI, Java), Fullstack development, Software Engineering, and DevOps.

---

## 📍 Contact & Links
- **Location:** Ho Chi Minh City, Vietnam
- **Email:** tht.csec2005@gmail.com
- **Website:** [hoangtu.dev](https://hoangtu.dev)
- **GitHub:** [github.com/thtcsec](https://github.com/thtcsec)
- **LinkedIn:** [linkedin.com/in/thtcsec](https://linkedin.com/in/thtcsec)

---

## 💼 Work Experience

### 1. Software Engineer (Backend) Intern
**Grab**
*Timeline: August 2026 – Present | On-site*
- Designing and developing backend services and microservice architectures within Grab's regional engineering teams.
- Collaborating with cross-functional teams on APIs, microservices, and cloud-native deployments.
- **Skills:** Java, Docker, Kubernetes, Microservices, REST APIs, SQL.

### 2. AI Engineer
**VETC**
*Timeline: August 2026 – September 2026 | Ha Noi City (Remote)*
- Developed Computer Vision pipelines for traffic camera analytics, real-time traffic density detection, and road surveillance.
- Integrated IoT sensor streams and engineered event-driven microservices for Intelligent Transportation Systems (ITS).
- **Skills:** Python, Computer Vision, Traffic Analytics, IoT Sensors, Microservices, Deep Learning, Docker.

### 2. AI Infra & Cloud Solutions Engineer
**Next Step Technology Solutions**
*Timeline: Jun 2026 – Present | Hybrid*
- Research and prototype serverless integration pipelines using Cloudflare Workers, D1, R2, Vectorize, and Workers AI.
- Design RAG-based knowledge retrieval workflows for internal documentation and cloud/security use cases.
- Explore multi-tenant storage patterns, API routing strategies, and event-driven orchestration using Redis Streams.
- Document cloud architecture options and technical trade-offs for Cloudflare-based solution proposals.
- **Skills:** Cloudflare Workers, Cloudflare D1, Cloudflare R2, Cloudflare Vectorize, Workers AI, Redis Streams, Serverless, RAG.

### 3. FCAJ Cloud Trainee - Cloud Security Builder
**AWS Study Group VN**
*Timeline: Sep 2025 – Present | Hybrid*
- Designed and implemented a Serverless Security Orchestration, Automation, and Response (SOAR) architecture using AWS native services.
- Orchestrated automated incident containment workflows using AWS Step Functions, AWS Lambda, EventBridge, and SQS.
- Built event-driven security pipelines integrating AWS GuardDuty for continuous threat detection and real-time response.
- Developed automated playbooks for resource isolation, security group updates, and IAM privilege containment.
- **Skills:** AWS, Terraform, Serverless, Step Functions, Lambda, GuardDuty, EventBridge.

### 4. Software Engineer
**MVV Telecom**
*Timeline: Dec 2025 – Apr 2026 | Can Tho (Remote)*
- Delivered real-time event monitoring features for multi-camera systems, improving system observability, security, and resource allocation in production environments.
- Integrated AI inference services into the system to support automated detection and event generation workflows.
- Configured system processing pipelines with controlled frame rates to balance detection accuracy and infrastructure resource usage.
- Monitored system resource usage (CPU, GPU, memory) and adjusted processing configurations to optimize stability.
- Deployed containerized services in a production-like environment using Docker and Nginx reverse proxy architecture.
- **Skills:** React, TypeScript, ASP.NET Core, Python, Docker, Nginx, SignalR, Suricata, Wazuh.

---

## 🎓 Education & Programs
- **HUFLIT University:** Bachelor of Cybersecurity (2023 – 2027 Expected) | GPA: 3.52/4.00
- **Tsinghua University:** Global Innovation Program / AI & Innovation Digital Economy (IEDE2026126). Research at the MSE Experimental Center; Extended Teaching Assistant. Academic supervision — [Prof. Kris Singh](https://bigdata.tsinghua.edu.cn/Iiede/nstructor/Index.html), Tsinghua MSE / SRII.

---

## 🛠️ Technical Skills
- **Backend:** ASP.NET Core, Node.js, REST APIs, SignalR, Java
- **Frontend:** React, TypeScript, Vite, Tailwind CSS
- **Cloud / DevOps:** Docker, Nginx, AWS, GCP, Terraform, Cloudflare Developer Platform
- **Databases:** MSSQL, PostgreSQL, MongoDB, Firebase, Supabase
- **Security:** Suricata IDS, Wazuh, SOC/SOAR workflows, JWT, WAF, Zero Trust

---

## 📁 Selected Projects
- **VETC AI Traffic Density:** Real-time GIS corridor monitoring for VETC (40+ cameras). YOLOv11 + SAHI + BoT-SORT density pipeline over Redis Streams; live G/Y/R Leaflet map.
- **SecureCoating-Vision:** Evidence-gated electrode coating inspection (Tsinghua MSE Track 4). Fail-closed PASS/REJECT/HOLD gate on YOLO-seg; CoatingVision held-out mAP50 0.63; ~312 ms CPU pipeline.
- **CTSmartCam:** AI camera surveillance with event-driven microservices, Redis Streams, Docker/Nginx.
- **Multi-Cloud Serverless SOAR:** AWS/GCP automated containment with Terraform, Step Functions, and Cloud Workflows.

---

## 🏆 Key Achievements & Awards
- **Ranked 2nd** – MUGVN & MongoDB Mini Hackathon 2026 (Team Vector404)
- **Ranked 10th** – VinUniversity Datathon "The Gridbreaker" 2026 (Team GenCore - Ranked 10th out of 50 top teams)
- **2nd Runner Up** – GenAI Express Demo Day GDG On Campus SGU 2026
- **Winner** – HSU Vibe Coding Talents 2025
- **Outstanding Student of the Year 2023** – Bu Dang District, Binh Phuoc Province

---

## 📜 Key Certifications
- **Google Cloud Computing Foundations** (Google Cloud) — Feb 2026
- **DevOps Track** (Google Cloud x Hack2Skill) — Jan 2026
- **Networking Track** (Google Cloud x Hack2Skill) — Jan 2026
- **Foundations of Cybersecurity** (Google x Coursera) — May 2025
- **Google AI** (Google) — Feb 2026