Hydroficient logoCurrently an Extern @Hydroficient·🟢 Open to work
Henry Tan portrait

IT Audit & Technology Risk Analyst | Software Engineering Background

Applying hands-on software engineering and cyber defense analysis to IT audit and GRC. Experienced in evaluating automated controls, IAM/RBAC, SDLC security, and cloud system architectures.

Work samples

A collection of risk assessments, threat models, and software engineering projects. These samples highlight practical experience in analyzing system vulnerabilities, testing technical controls, and co

  • Issue Tracker
    Issue Tracker

    Personal Project

    Issue Tracker

    An issue tracking dashboard that displays real-time summaries, interactive charts, and a feed of recent activity.

    ReactNext.jsTypeScriptSoftware EngineeringGitTailwind CSSFull-Stack DevelopmentDashboarding
  • Hydroficient IoT Cyber Defense Externship
    Hydroficient IoT Cyber Defense Externship
    Hydroficient logo

    Hydroficient · ✅ Verified by Extern · ⏱️ In progress

    Hydroficient IoT Cyber Defense Externship

    Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.

    Python ProgrammingData AnalysisThreat ModelingDashboard Development

About me

Applying hands-on software engineering and cyber defense analysis to IT audit and GRC. Experienced in evaluating automated controls, IAM/RBAC, SDLC security, and cloud system architectures.

I work in IT audit and technology risk with practical experience in software development and cyber defense. Having built full-stack applications and conducted structured threat assessments, I know how systems operate under the hood, from database logic and API endpoints to deployment workflows and access permissions.

Externships

Hydroficient IoT Cyber Defense Externship

Hydroficient

Experience

Software Engineer

nooon · Oct 2025 - Jul 2026

Software Engineer

Black Spectacles · May 2022 - Jul 2024

Software Engineer

Stealth Starrtup · Dec 2020 - May 2022

Education

Baruch College

Bachelor's Degree in Mathematics · Class of 2027

App Academy

Web Development Certificate · Class of 2019

Skills

Change ManagementReactNext.jsNode.jsPythonSQLTypeScriptHTMLTailwind CSSCSSAPI IntegrationAWSBack-end DevelopmentFigmaFront-end DevelopmentFull-Stack DevelopmentGitGoogle AnalyticsHubSpotJavaScript
Back to works

Issue Tracker

An issue tracking dashboard that displays real-time summaries, interactive charts, and a feed of recent activity.

ReactNext.jsTypeScriptSoftware EngineeringGitTailwind CSSFull-Stack DevelopmentDashboarding

Overview

An issue tracking dashboard that displays real-time summaries, interactive charts, and a feed of recent activity.

Issue Tracker

What I've accomplished

- Engineered a secure Identity and Access Management (IAM) system using NextAuth to enforce Role-Based Access Controls (RBAC) for data modification. - Implemented dynamic, URL-parameter-based issue filtering using Prisma queries to ensure accurate data retrieval and persistent, shareable audit views.

Outcome

https://issue-tracker-zudq.vercel.app/

View all works

✅ Verified by Extern · ⏱️ In progress

Hydroficient IoT Cyber Defense Externship

Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.

Python ProgrammingData AnalysisThreat ModelingDashboard Development

Overview

The externship examined an operational IoT deployment for a marina and worked through offensive and defensive security exercises. The work mapped device interactions, launched realistic attacks such as spoofing and replay, and implemented protocol-level defenses including TLS and mutual TLS. Deliverables included an attack log, mitigation configurations, and a written security playbook.

Hydroficient IoT Cyber Defense Externship

What I've accomplished

I produced a threat-model package for The Grand Marina that mapped assets and trust boundaries, applied STRIDE analysis, and delivered a PDF and threat-model card with prioritized threats and mitigation notes.

Project breakdown

The Grand Marina system was analyzed, assets and trust boundaries were mapped, STRIDE categories were applied, and a PDF plus threat-model card were produced showing prioritized threats and mitigation notes.

View all works