I reviewed SGV International’s Azure setup using ScoutSuite, and Defender for Cloud to see where things could be tightened up. After going through the findings, I mapped everything to CIS benchmarks, called out the issues that actually mattered, and built an LOE-vs-risk breakdown so leadership could understand what to fix first. A lot of the work centered around identity, access, and small configuration gaps that could affect other systems or teams downstream.
Jeremy Viet Duong
Recent CIS graduate and early-career SOC & Cloud Security analyst focused on protecting cloud environments and the digital supply chains that keep organizations running.
Here's a collection of the work I did throughout my CIS program, along with a few personal cloud, security, and supply chain related projects I've taken on as I keep learning. these projects reflect how I grew my skills in AWS, security, and full-stack development while working with real teams, real deadlines, and real environments that supported different parts of a digital supply chain.
I served as the production architect for my CIS 4375 capstone project, building the full AWS environment for a custom inventory management system for a small business. Designed and deployed a secure VPC, EC2 backend, RDS MySQL database, and S3-hosted frontend using CloudFormation. Focused on security, reliability, and keeping the system easy for a small team to operate.
For CIS 3339, my team and I worked on expanding an existing MEVN full-stack application built for a Houston non-profit. The platform is used by Community Health Workers to manage clients, events, services, and intake forms across multiple organizations. We didn’t start from scratch — our job was to take over the codebase, improve it, and add new features. We migrated the frontend from the Options API to the Composition API, added a working login system with viewer/editor roles, built CRUD tools for services, connected the backend to a cloud MongoDB Atlas instance, and cleaned up several API routes. I helped prepare our Sprint 3 presentation and worked with the team to test everything end-to-end.
I built a stock brokerage management system for my CIS 2368 final project, focusin on getting comfortable with full-stack development in Python. The backend was written in Flask, and I used EJS on the frontend to keep things simple and easy to work with. The system lets you manage investors, stocks, and bonds, and it includes the basic rules you'd expect in a brokerage, like not letting someone sell more shares than they actually own.
For my CIS 3367 Project, I designed a multi-region AWS architecture for a fictional insurance company called GoGreen. The setup used a full three-tier design across two regions, with separate VPCS, subnets, EC2 app servers, RDS databases, and ElastiCache in each region. I added CloudFront, Route 53, and Global Accelerator for performance and failover, and layered in security tools like GuardDuty, WAF, Secrets Manager, IAM controls, and proper network boundaries. Overall, the project gave me hands-on experience building a secure, scalable cloud environment from the ground up.
For my CIS 4365 project, my team and I designed a full e-commerce management system using SQL and ER modeling. We built out the entities, relationships, and core database features for products, customers, orders, payments, and inventory. The goal was to create a database structure that could support a real online store.
For my CIS 2348 final project, I built a Python program that manages the inventory for an electronics store. The program reads three CSV files for manufacturers, prices, and service dates, then combines everything into a set of clean, organized inventory reports. It sorts items, flags products that are past their service date, and separates damaged items into their own file. This project helped me get comfortable with Python fundamentals like file input/output, dictionaries, loops, and basic data processing.
For my CIS 3347 final project, I designed the full network architecture for an eight-story residence hall at the University of Houston. The building needed separate networks for residents, employees, and visitors, so I planned out a segmented design with different subnets, Wi-Fi frequencies, and security layers across all eight floors. I mapped out every floor’s wired and wireless layout, placed all switches, routers, WAPs, and backbone connections, and built a full cost estimate using Cisco equipment. This also included designing the MDF on the first floor, distribution for floors 2–8, and a full building-wide backbone diagram that shows how traffic flows from the ISP router through the firewall, core router, and into each floor’s LAN.
Best way to reach me:
✉️
thejeremyduong@gmail.com
💼
LinkedIn profile
Open to chatting about junior security roles, cloud or supply chain
security projects, or helping students break into cybersecurity.
Also exploring graduate programs that combine cybersecurity, cloud,
and supply chain systems.