derekwei.xyz

~/resume

Resume

Education, certifications, competition results, and experience. Seeking cybersecurity internships.

Download PDF

U.S. citizen eligible to obtain a Secret security clearance.

5x CompTIA certified (CySA+, PenTest+, Security+, Network+, ITF+) · AWS Certified AI Practitioner · CTF competitor · preparing for the CPTS

Print output strips site chrome and renders dark on white.

Profile

Summary

Cybersecurity student working toward offensive security: penetration testing, Capture the Flag competition, and the defensive analysis that connects findings back to real systems. Placed 1st of 1,692 teams in the National Cyber League High School division, and now hold a full-time IT generalist role alongside a full course load. Bilingual in English and Mandarin Chinese. Seeking cybersecurity internships.

Education

Recognition

Scholarships

Certifications

Each credential links to its public Credly badge.

CompTIA stackable certifications

CompTIA awards stackable certifications for earning qualifying combinations of underlying certifications. These credentials are listed separately and do not represent additional certification exams.

View all verified credentials on Credly

Certification roadmap

Roadmap items are goals in progress, not earned credentials.

Competition results

Placements as recorded. Team results are stated as team results.

Also competed in Squ1rrel CTF and CyberPatriot.

Projects

RowdyHacks XII · 1st place

RowdyHacks XII: full board clear across eight categories

Twenty-eight writeups spanning web, crypto, forensics, rev, pwn, OSINT, ICS/OT, and misc: from a ret2win overflow and an Erlang/OTP SSH pre-auth RCE to Modbus register analysis and a five-stage 600-point forensics chain.

Team Difference: 1st of 62 teams, all 28 challenges solved.

Read the writeups

UIUCTF 2026 · Web exploitation

Nabi AI: SSRF via a client-controllable vault address

A deprecated, client-controllable baoAddr field in a Next.js Server Action turned an AI challenge into a conventional SSRF and secrets-management failure.

Read the writeup

BroncoCTF 2026 · OSINT

AO-SINT: evidence-first game geolocation

Used topography, architecture, map geometry, and sightline reconstruction to identify four Arcane Odyssey locations.

Team idktheflag placed 8th of 753 teams.

Read the writeup

Open source · Astro on Cloudflare Pages

derekwei.xyz: static security portfolio

This site: a static Astro and TypeScript build with a strict Content Security Policy, no cookies or trackers, and no third-party requests.

Read the projectSource

Experience

Relevant experience

  1. Information Technology Generalist

    VUTEX INC

    Sep 2026 to Present · Full-time

    • Perform internal cybersecurity checks and support company endpoints and users
    • Maintain company network and infrastructure, including physical cabling and hardware
    • Build and audit the company website, and develop a plan for a local large language model (LLM)

  2. Cybersecurity Summer Camp Intern

    CyberTexas Foundation

    Jun 2026 to Present

    • Guide students through hands-on cybersecurity exercises at St. Mary's University
    • Support instructors during classroom and lab activities
    • Troubleshoot laptops, Windows issues, software problems, network connectivity issues, and workstation failures
    • Resolve real technical issues including blue screens, corrupted files, installation problems, and OS troubleshooting

  3. Technical Support

    NEISD Institute of CyberSecurity and Innovation (iCSI)

    Aug 2022 to May 2026

    • Provided technical support across Linux and Windows systems for students and staff in a cybersecurity program serving seven NEISD high schools, diagnosing hardware, software, and network connectivity issues
    • Maintained the virtualized lab environments used for hands-on cybersecurity training: configuring virtual machines, restoring lab images, and clearing network issues so classes ran without interruption
    • Authored and maintained technical documentation and troubleshooting workflows, standardizing common fixes for instructors and students

Capabilities

Technical skills

Focus areas
Web Application Security, Capture the Flag (CTF), Digital Forensics, Open Source Intelligence (OSINT), Network Analysis, Password Auditing, Penetration Testing Fundamentals, Security Tooling
Security
Web application exploitation, OSINT (open source intelligence), digital forensics, network traffic analysis, log analysis, cryptography, password cracking, penetration testing fundamentals, vulnerability scanning, incident detection and response
Systems and tooling
Wireshark, Nmap, Burp Suite, Kali Linux, Metasploit, Linux command line, TCP/IP networking, virtual machine (VM) environments, Windows, hashcat, John the Ripper
Scripting and documentation
Python, Bash, Git, technical documentation, Microsoft Word (MOS certified), Microsoft Excel
Professional skills
Communication, technical documentation, troubleshooting, problem solving, mentoring, teamwork
Languages
English (native), Mandarin Chinese (native/bilingual)

Leadership and activities