Yaoting Wang
Security Analyst · Risk, Cloud & AI Security
I learned security from the network up. Now I assess risk at a Canadian credit union, and build tools that test AI agents.
- Available Full-time from Apr 2027
- Looking for Security Analyst · GRC · Cloud & AI Security
- Now Information Security co-op, Coast Capital
- Based Vancouver, BC · open to relocating in Canada
Start here
- MCP Security Framework · Project · 2025 · 60+ MCP servers tested · 14 detectors
- Coast Capital Savings · Co-op · 2026 · 50+ risk assessments · 20+ vendor reviews
- VibesMeet LLC · Internship · 2025 · ~30% lower AWS spend · checks on every merge
- PwnScan · Project · 2026 · Top 3 in CMPT 783 · CVEs ranked by exploit risk
Experience
- Coast Capital Savings · Information Security Co-op · Jun 2026 – Feb 2027
- VibesMeet LLC · Cybersecurity & DevSecOps Intern · Feb 2025 – Jul 2025
- BCIT Cyber Security Office · Cybersecurity Analyst Intern · May 2024 – Aug 2024
- Vancouver International Volunteer Association · IT & Security Coordinator · Oct 2024 – Present
More projects
- TELUS AI Hackathon · An AI reviewer that reads each static-analysis finding, decides whether it is real, and proposes a fix that will not break the code.
- Distributed Password Manager · A GFS-style password vault on GCP that keeps serving reads when a replica dies, and replays what it missed when it returns.
- SecureInsight · EDR + AI · Turns raw Wazuh EDR events into analyst-ready triage summaries, cached so repeated alerts cost nothing.
- Internal Penetration Test · A team grey-box test of a staging web app and its APIs. My part: the access-control findings, each proven with the requests that show it and paired with a fix.
- Splunk SOC Detection Lab · Attack scenarios turned into SPL detections over Windows, Sysmon and firewall logs, with a triage runbook for each.
- Threat Modelling · VIVA · STRIDE across a non-profit’s web app, database, server and network: 12 threats found, rated, and remediated.
- Enterprise Campus Network · A four-site enterprise network built from scratch by a team of six, and I worked every layer of it: routing and switching, firewalls and VPNs, the servers, and the SIEM and IPS that watch it all.
Education
- Master of Cybersecurity · Simon Fraser University · Sept 2025 – Apr 2027 (expected)
- BTech, Digital Forensics & Cybersecurity · BCIT · Sept 2023 – May 2025
- Diploma, Computer Information Systems Administration · BCIT · Sept 2021 – May 2023
Certifications
Cisco CCNA · CompTIA Security+ · Fortinet NSE 4 · Palo Alto EDU-120 · Google Cybersecurity · CISA (in progress)