Resume
简历
Senior Software Engineer
高级软件工程师
Education
Master's Degree in Computer Technology
Nanjing University of Posts and Telecommunications · 2015–2018
Bachelor's Degree in Communication Engineering
Nanjing University of Posts and Telecommunications · 2011–2015
Awards: National Inspirational Scholarship, First-Class College Scholarship
教育背景
计算机技术硕士
南京邮电大学 · 2015–2018
通信工程学士
南京邮电大学 · 2011–2015
荣誉奖项：国家励志奖学金、校一等奖学金
Work Experience
Trend Micro · 2018–2025
Mobile Security as a Service
2022–2025
Integrated with Vision One (a unified security platform centered on XDR), providing unified mobile security management and threat defense capabilities. Built in-house MDM capabilities with deep integration of mainstream MDM vendor APIs, combining device management, compliance checks, mobile security scanning, real-time malware protection, and malicious behavior monitoring to deliver a cloud-based, configurable one-stop Mobile Threat Defense (MTD) solution.
Responsibilities
- Led deep integration with Microsoft Intune for device management and security policies
- Designed, developed, and maintained the in-house MDM system from technical research to core feature implementation
- Implemented native device management capabilities based on Google Management API and Apple MDM Protocol
- Designed and implemented a lightweight device enrollment mode for rapid integration with third-party MDMs
- Monitored and continuously optimized core service SLOs
Achievements
- Served 844 Intune customers (35% of total platform customers) through deep Microsoft Intune integration
- In-house MDM (MDD) became the most adopted enrollment mode at 38%, serving 934 customers
- Enabled rapid device onboarding across multiple MDM ecosystems through lightweight enrollment mode
- Improved Latency < 8s SLO coverage from P99.16 to P99.9
Sandbox as a Service
2020–2022
Integrated with Vision One, providing malware detection services. Leveraged sandbox technology to perform automated analysis of files, URLs, and HTML/JavaScript, generating comprehensive detection reports including malware analysis, behavior analysis, network traffic analysis, and phishing detection.
Responsibilities
- Designed and developed the URL and HTML Behavior Engine with Puppeteer and custom JavaScript hooks
- Designed and implemented the Decision Engine based on YARA rules for multi-dimensional risk assessment
- Built phishing detection capabilities with favicon similarity detection, domain analysis, and TLS validation
- Optimized task scheduling and consumption strategies for large-scale asynchronous URL scanning
- Optimized AKS resource usage and scaling strategies for resource-intensive rendering tasks
Achievements
- Built and deployed a URL risk assessment system based on real web behavior analysis (SaaS)
- Enhanced phishing detection capabilities beyond traditional blacklist/whitelist detection
- Significantly improved platform stability and reduced AKS resource waste
工作经历
趋势科技 · 2018–2025
移动安全即服务
2022–2025
集成至 Vision One（以 XDR 为核心的统一安全平台），提供统一的移动安全管理和威胁防御能力。构建自研 MDM 能力，深度集成主流 MDM 厂商 API，结合设备管理、合规检查、移动安全扫描、实时恶意软件防护和恶意行为监控，交付云端可配置的一站式移动威胁防御（MTD）解决方案。
工作职责
- 主导与 Microsoft Intune 的深度集成，实现设备管理和安全策略
- 从技术调研到核心功能实现，设计、开发和维护自研 MDM 系统
- 基于 Google Management API 和 Apple MDM Protocol 实现原生设备管理能力
- 设计并实现轻量级设备注册模式，快速集成第三方 MDM
- 监控并持续优化核心服务 SLO
工作成果
- 通过深度 Microsoft Intune 集成，服务 844 个 Intune 客户（占平台总客户的 35%）
- 自研 MDM（MDD）成为采用率最高的注册模式，占比 38%，服务 934 个客户
- 通过轻量级注册模式实现跨多个 MDM 生态系统的快速设备接入
- 将延迟 < 8s 的 SLO 覆盖率从 P99.16 提升至 P99.9
沙箱即服务
2020–2022
集成至 Vision One，提供恶意软件检测服务。利用沙箱技术对文件、URL 和 HTML/JavaScript 进行自动化分析，生成包含恶意软件分析、行为分析、网络流量分析和钓鱼检测的综合检测报告。
工作职责
- 使用 Puppeteer 和自定义 JavaScript 钩子设计开发 URL 和 HTML 行为引擎
- 基于 YARA 规则设计实现多维度风险评估的决策引擎
- 构建钓鱼检测能力，包含 favicon 相似度检测、域名分析和 TLS 验证
- 优化大规模异步 URL 扫描的任务调度和消费策略
- 优化资源密集型渲染任务的 AKS 资源使用和扩缩容策略
工作成果
- 构建并部署基于真实网页行为分析的 URL 风险评估系统（SaaS）
- 增强钓鱼检测能力，超越传统黑白名单检测方式
- 显著提升平台稳定性并减少 AKS 资源浪费
Side Projects
Some projects are open-sourced on GitHub
ProWords 387 stars
AI-powered English learning platform with vocabulary for CET-4/6, GRE, TOEFL, IELTS, and career customization
Podcast-Transcription 97 stars
Podcast transcription web app built with Next.js and Whisper API, featuring AI-powered summaries
tracecc
AI API request tracing proxy with Web UI control and visual report generation
wgo
Go project scaffolding tool for quickly creating well-structured Go projects
kubetunnel
Tunnel tool for accessing Azure PaaS services through AKS proxy pods
pt-cli
CLI tool for audio transcription powered by OpenAI Whisper
feedback-agentic
Multi-agent customer feedback processing system built on Claude Agent SDK for Trend Micro (Private)
个人项目
部分项目已在 GitHub 开源
ProWords 387 stars
AI 驱动的英语学习平台，支持四六级、GRE、托福、雅思词汇及职业定制
Podcast-Transcription 97 stars
基于 Next.js 和 Whisper API 构建的播客转录 Web 应用，支持 AI 生成摘要
tracecc
AI API 请求追踪代理，支持 Web UI 控制和可视化报告生成
wgo
Go 项目脚手架工具，快速创建结构良好的 Go 项目
kubetunnel
通过 AKS 代理 Pod 访问 Azure PaaS 服务的隧道工具
pt-cli
基于 OpenAI Whisper 的音频转录命令行工具
feedback-agentic
基于 Claude Agent SDK 为趋势科技构建的多智能体客户反馈处理系统（私有）