Expected Dec 2026
Universiti Teknologi PETRONAS
Bachelor of Computer Science (Hons)
Cybersecurity major, corporate management minor. CGPA 3.65. Dean's List, January 2024 and September 2024.
Open to graduate roles from January 2027
Akram Faisal
Cybersecurity & DevOps Engineer Perak, Malaysia
Final-year Computer Science student at Universiti Teknologi PETRONAS. I harden Linux servers, plan self-hosted infrastructure and work where security meets policy.
Reading nowThe Story Of My Life by Helen Keller
About me
I study Computer Science at Universiti Teknologi PETRONAS, majoring in cybersecurity with a minor in corporate management. Alongside my degree I work part-time as a DevOps engineer at ERS Energy, where I look after Linux servers, plan self-hosted infrastructure and keep server access secure and traceable.
The work I care about most sits where security meets policy: governance, risk and compliance. I play CTFs on the blue-team side, mostly OSINT and memory forensics, and I teach Volatility3 workshops to other students. Outside tech I serve as a youth representative on Dewan Belia Perak and as Information Chief of PGP Perak.
I will be graduating in December 2026 and currently maintaining CGPA of 3.65, and I am looking for graduate roles in GRC, Cybersecurity or DevOps.
Education
Certifications
- CompTIA Security+Exam by Dec 2026, through the Yayasan Peneraju programme
- AWS Academy Cloud FoundationsIn progress, preparing for AWS Certified Cloud Practitioner
- Memory Dump Analysis with Volatility3Instructor, CYBERHAX UTP, Mar 2025
Career & experience
01
DevOps Engineer
ERS Energy Sdn Bhd · Part-time, remote
- Installed fail2ban on company servers to block brute-force login attempts, and moved the team to individual server accounts so every action can be traced to a person.
- Wrote the infrastructure plan for self-hosting Odoo Community Edition: Proxmox virtualisation, Docker, 3-2-1 backups, and monitoring with Prometheus, Grafana and Alertmanager.
- Setting up AMD Cloud Manageability Service for out-of-band management of company machines.
Tech:Linuxfail2banProxmoxDockerPrometheusGrafanaAlertmanager02
Software Engineer Intern
ERS Energy Sdn Bhd
- Set role-based access on internal AppSheet apps so each user only sees the sections their role needs.
- Prepared an internal IT strategy on self-hosting Odoo and proposed a three-domain structure that separates public, product and internal company apps.
- Presented a user satisfaction framework (NPS, CSAT, CES, SUS and UES) to the Digital Department, and mocked up an AI assistant module for a batch SCADA system.
Tech:AppSheetOdooIT strategyUX research
Skills & toolbox
Security operations
Blue-team analysis, OSINT and memory forensics, from CTFs and coursework.
Infrastructure & SRE
Linux servers, containers, monitoring and backup design.
Software
Command-line tools, web apps and automation scripts.
Governance & leadership
Policy drafting, budgeting and public speaking in English and Bahasa Melayu.
Projects
01
DockVault+
A command-line tool for backing up Docker volumes, written in Go, with ML-assisted security scanning of the data it handles. It runs natively on Windows and Linux without WSL2.
Final year project · In development
A command-line tool for backing up Docker volumes, written in Go, with ML-assisted security scanning of the data it handles. It runs natively on Windows and Linux without WSL2.
- Design
- Direct Go execution with native Windows and Linux support, so it needs no WSL2.
- Outcome
- Installation guide written and pitched for production use at ERS Energy.
- Stack
- Go, Docker
- Status
- In development
02
Oral Odyssey
A bilingual, retro arcade-style web app that teaches dental health through games, built with a Ministry of Health (KKM) dental team.
Health innovation · 2026
A bilingual, retro arcade-style web app that teaches dental health through games, built with a Ministry of Health (KKM) dental team.
- Format
- Installable progressive web app in Bahasa Melayu and English.
- Outcome
- Entered in a Perak state innovation competition, October 2026.
- Role
- Platform developer
- Type
- PWA
03
Youth cybersecurity workshop
An introduction to cybersecurity for secondary school students. I planned the modules, built the challenges and ran the infrastructure.
Outreach
An introduction to cybersecurity for secondary school students. I planned the modules, built the challenges and ran the infrastructure.
- Modules
- Cryptography and OSINT challenges.
- Platform
- CTFd in Docker on a Linode VPS.
- Stack
- CTFd, Docker, Linode
- Role
- Organiser
04
StudyOS
A study app I built for my cloud computing and CECL courses.
Personal tool
A study app I built for my cloud computing and CECL courses.
- Hosting
- Deployed on Vercel behind Cloudflare.
- Stack
- Vite, React
- Type
- Web app
05
Interactive study labs
Single-file HTML labs for information security management and cloud courses, with interactive exercises and automated smoke tests that confirm every component still works.
Coursework
Single-file HTML labs for information security management and cloud courses, with interactive exercises and automated smoke tests that confirm every component still works.
- Stack
- HTML, JavaScript
- Type
- Learning tool
06
Self-hosted Odoo blueprint
An SRE-style plan for running Odoo Community Edition on company infrastructure.
ERS Energy · Architecture
An SRE-style plan for running Odoo Community Edition on company infrastructure.
- Platform
- Proxmox hosts running Docker services.
- Resilience
- 3-2-1 backups: three copies, two media, one off-site.
- Monitoring
- Prometheus metrics, Grafana dashboards and Alertmanager alerts.
- Stack
- Proxmox, Docker, Prometheus, Grafana
- Type
- Design document
07
Memory forensics workshop
A hands-on session on analysing memory dumps with Volatility3, the same skill set I use in blue-team CTFs.
CYBERHAX UTP
A hands-on session on analysing memory dumps with Volatility3, the same skill set I use in blue-team CTFs.
- Tool
- Volatility3
- Role
- Instructor
Leadership & civic
Youth councils, student government and civic work.
Dewan Belia Perak
Youth Representative, DB23 · Session 5
Represent young people in the Perak state youth assembly.
- Debated youth consumer literacy and the Perak Youth Consumer Literacy Plan 2030 in the assembly.
- Drafted a full motion proposing a youth quota on mosque committees.
Parti Generasi Progresif (PGP) Perak
Information Chief · State chapter
Lead communications for the Perak chapter and helped steer its reform.
- Led a reform initiative within the state chapter.
- Supported the leadership transition with meeting minutes and a pitch deck.
- Helping finalise the chapter's candidate list for the 2026 Parlimen Belia Malaysia election.
CYBERHAX UTP
Student Advisor · Previously President
Advise the university cybersecurity club I led as President.
- As President, grew membership by more than 200% and ran over ten events.
- Organised a digital forensics workshop on memory analysis with Volatility3.
Student Representative Council, UTP
General Secretary
Managed the council's RM30,000 budget.
Axiata ULDP
Participant, Cohort 15
Leadership development programme run by Axiata Group.
INTERWOVEN
Sponsorship team · UTP student-led international programme
Securing sponsors for a UTP student-led international programme.
CTF results
Blue team: OSINT and memory forensics.
- 4thCSLU@UPM Mini CTF
- 12thPwC Hack-A-Day
- 18thASEAN Battle of Hackers 2023
Latest writing
All posts on Almanac →My No-Nonsense Guide to Setting Up SEEDLab Ubuntu on VMware
Installing the SEED Labs security education environment on VMware instead of VirtualBox, step by step.
Automating the Unfixable: How I Tamed a Critical Polkitd Memory Leak
A production server kept leaking memory through polkitd. This is how I automated the mitigation.
picoCTF: Hidden in Plainsight Writeup
A forensics challenge writeup: finding the hidden payload and extracting the flag.