lfeng_ Engineering Portfolio

Security · Networks · Cloud · Threat Analysis

Cybersecurity

Training and practical experience in networking, governance, data security, security operations, cloud security, threat modelling, vulnerability assessment and penetration testing.

This webpage is under construction
Hack The Box logo

August 2025 — Present

Hack The Box

Ongoing practical cybersecurity training through technical labs and vulnerable systems.

CNCS logo

May — July 2025

National Cybersecurity Centre

  • Princípios de Técnicos em Cibersegurança / Principles of Cybersecurity Technicians
  • Auditoria de Vulnerabilidades / Vulnerability Audit
  • Segurança de Redes / Network Security
Code for All logo

October 2024 — May 2025 · 450 hours

Cybersecurity Bootcamp — Code for All

Module 0 · Networking

  • OSI and TCP/IP models
  • Routing and switching

Module 1 · GRC

  • Cybersecurity frameworks and CIA triad
  • Systems hardening
  • Risk analysis and auditing

Module 2 · Data Security

  • Data classification and DLP
  • GDPR, encryption and password security
  • PKI and SSL/TLS

Module 3 · SecOps Foundations

  • IDS, SIEM and incident response
  • IOC analysis and threat hunting

Module 4 · Cloud Security

  • AWS identity and access management
  • IDS/IPS, Snort and traffic analysis
  • VPC and CloudTrail

Module 5 · Threat Modelling

  • Cyber Kill Chain and MITRE ATT&CK
  • OWASP, STRIDE and data-flow diagrams

Module 6 · Threat Hunting

  • YARA and VirusTotal API
  • Malware analysis and forensics
  • Zeek and RITA

Module 7 · Vulnerability Assessment

  • Burp Suite, w3af and OWASP ZAP
  • CVE, CVSS and Nessus
  • Risk rating and false-positive handling

Module 8 · Penetration Testing

  • Enumeration and exploitation
  • Nmap, Metasploit and OSINT
  • Planning, scoping and impact analysis