vincent.strsx.com
Vincent Ko
AI Engineer + Security Engineer @ Crypto.com
The University of Hong Kong | Computer Science | Hong Kong
LANGUAGES: Chinese (Native) English (Business) Japanese (Business)
"Don't repeat yourself. Automate it - with AI"
Introduction
"AI is powerful only if you know how to use it"
- AI Engineer + Security Engineer in the security team for Detection Engineering at Crypto.com
- Enabling highly automated detection engineering workflows
- Multi-agent use case design & development; accurate multi-agent orchestration
- Production RAG systems; MCP wiring / development
- Agent security (access controls, write-tool guards), tracing & observability
- Agent evaluation (fallback policy, task outcome & "behavior" evaluation, accurate tool use)
- Certified Junior Penetration Tester (eJPT · verify certificate)
- Detection engineering: Sumo Logic SIEM (CSE), Detection as Code (Terraform), MITRE ATT&CK gap analysis, false-positive / noise reduction
- Optimizations:
-> 7x backend speed increase
-> 48% decrease in agent resp. time (12->6.3mins)
-> 51% cost saved for multi-agent project ($1.02->.5)
-> 9.25x smaller payload in cross-agent communication (13994 chars -> 1303 chars, no degradation in performance)
Personal
- Developer of Personal Agent SAGE (personal use; this page's chat is powered by a SAGE websocket bot)
- GenAI daily user (OpenCode, Oh My Openagent, etc.)
- DGX Spark investor, local models enjoyer
- LoRA LLM Fine-tuning with Unsloth
- Casual AI (YOLOv11, Stable Diffusion, Text 2 Speech)
- Code in free time. 30+ open source projects (see Github)
- Implemented from scratch as practice: HTTP/2 server, Socks5, SMTP
- Java lover & Java Spring Boot app dev. (see Github)
- JLPT N2 (B2)
FRONT: React.js Zustand Vue.js Flutter
BACK: TypeScript NestJS Spring Boot Python FastAPI C# Unity Go Fiber
INFRA: Redis PostgreSQL MongoDB PGvector Kubernetes Docker Compose Kafka Github Actions Terraform Spacelift
CLOUD: AWS (ECS, SQS, Lambda, AgentCore) Azure Oracle
AGENT: LangChain LangGraph Bedrock AgentCore Spring AI LiteLLM RAG MCP Claude Code Copilot
SECURITY: Sumo Logic CSE MITRE ATT&CK Detection as Code Alert Triage FP / Noise reduction
COMM: Jira Confluence Slack
Experience
Crypto.com
AI Engineer, Security Engineer
July 2026 - Present
Hong Kong SAR · Hybrid
Detection Engineering — AI Automation
- AI Engineer + Security Engineer in the security team for the Detection Engineering dept.
- Enabling highly automated detection engineering workflows

Agentic AI & Automation
- Multi-agent use case design & development
- Accurate multi-agent orchestration
- Production RAG systems, MCP wiring / development
- High quality reference materials & tool outputs
- Agent self-improvement mechanism
- Agent security: access controls, write-tool guards & protection
- Agent tracing & observability
- Agent evaluation: fallback policy, task outcome & "behavior" evaluation (e.g. accurate tool use)

Detection Engineering
- Sumo Logic SIEM (CSE)
- Detection as Code (Terraform)
- Wiring log sources
- Security operations: detection engineering, alert triage
- Research new detection use cases (huge-volume log analysis)
- MITRE ATT&CK gap analysis
- False positive / noise reduction
- CSE rules fine-tuning

Platform & Tooling
- LiteLLM
- Terraform + Spacelift
- AWS AgentCore, ECS, SQS, etc.
- MCP implementation & deployment
- Agent loop optimization
- Observe, identify & improve agent behavior

- Cross-team communication is of utmost importance
Crypto.com
Security Engineer
June 2024 - March 2026
Hong Kong SAR · Hybrid
AI Code Reviewer (Multi-Agent System)
- Designed & built a production-ready, scalable system on Horizontally Scalable AWS EC2 using FastAPI and Producer-Consumer architecture
- Orchestrated LangGraph Multi-Agent workflows for sequential file indexing (PGvector) and deep code analysis
- Developed specialized agents with tools for Multi-Repo referencing, symbol & file retrieval, RAG-based context injection and agent task delegation
- Implemented Interactive Repo Reviewer: A GitHub chat agent for vulnerability discovery via hybrid search (SQL & Vector)
- Integrated Summarizer Agent to report fixed code vs. new vulnerabilities and suggest repairs directly on GitHub
- Designed a React.js UI for full-detail vulnerability management and visualization
- Solved Long-Context issues via intelligent tool-usage and context summarization
- Engineered secure cross-repo referencing with strict permission handling and data isolation

- VP of SE: "Output is quite good. It found some hidden subtle bugs"
- Reported 100+ risky vulnerabilities not caught by Claude Code; achieved 7x speed increase
- Optimized AI agent workflows, reducing token usage by 40% while increasing throughput

Blockchain Security Software Development
- Primarily blockchain transaction monitoring (NestJS, Microservice)
- Monitoring txns for 1.2M+ monthly active users (of 100M+ users)
- Impl. software to enable high-speed communication with blockchain nodes
- Impl. software to track company deposits/withdrawals and trading volume
- Maintain and deploy 100+ repos 100% automatically with Claude Code Agents
- Responsible for heavy AI automation
- Blockchain Project AI Automation reducing dev. time by 100% (2-3 weeks to 1 week)
- Prometheus, Grafana

- Successfully reported double spending and keep trading volume in check
- New chains are completed in 1 day with Claude Code and custom Agents

Common Tools
- AWS, PostgreSQL, Kubernetes, Docker Compose
- System design
- Note: Development includes Software Design, Implementation, Testing, Deployment
The University of Hong Kong
Software Developer (Intern)
June 2023 - August 2023 (3 months)
Hybrid
Email plugin to check for spam emails
- UI design and implementation with Vanilla JS & Webpack
- Backend API development with Express JS and spam checking functionality
- Google Doc as database
- Designing and implementing a backend system to allow users to use their own spam email list and other minor functionalities
Freelance Web Design and Development
Creator
November 2020 - December 2020 (2 months)
Remote Work
Small online e-commerce site
- Website design
- HTML, CSS & JS
Education
University of Hong Kong
Computer Science (2021 - 2024)
Hong Kong Institute of Vocational Education
Higher Diploma in Telecommunications and Networking (2019 - 2021)
Certification
eLearnSecurity Junior Penetration Tester
July 2021
Japanese Language Proficiency Test JLPT N2
January 2024
Scholarship
HKSAR Government Scholarship Fund - Endeavour Merit Award
2020 - 2021
HKSAR Government Scholarship Fund - Outstanding Performance 19/20
2019 - 2020
Personal Skills
Various tools and skills I learned & developed
Coding LANGs
Java
JS/HTML/CSS
Python
Go
C# (w/ Unity)
Swift
C/C++,PHP
Frontend
Vue.js
React.js
Flutter
Chrome
Extension
Backend
Spring Boot,
Spring Data, Security
Node JS,
NestJS
Python Flask, FastAPI, PyTorch
LangChain, LangGraph
Go Fiber
  • Infra
  • Kafka
  • MongoDB, Redis
  • PGvector, Milvus
  • MySQL, PostgreSQL
  • ElasticSearch
  • Kubernetes, Docker Compose
  • Github Actions
  • Terraform, Spacelift
  • Specialized
  • Cloud
  • Linux (Ubuntu, Kali)
  • Penetration Testing
  • Unity 3D, Blender
  • Figma
  • Networking
  • Network Comm
  • Rest API
  • RPC
  • OAuth 2.0, OIDC, JWT
  • WebSocket
  • Webhook
Ask SAGE about my experience!