Hiroki (rung) Suezawa

Interest

Programming
- Go
Protocol
- TLS, HTTP, HTTP2, SMTP, DNS
Security
- Linux, Network, Container, Kubernetes, Cloud(GCP), Malware
DevSecOps and Supply-chain
- IaC(Terraform), SAST, CI/CD Pipeline, Supply-chain Security

I’ve contributed to Gosec, Falco, etc.

Aug 10: Dangerous attack paths: Modern Development Environment Security - Devices and CI/CD pipelines (Security Camp 2022)
- Slide(English) / Slide(Japanese/日本語)
- Hands-on Exercises

Oct 20: Attacking and Securing CI/CD Pipeline - CODE BLUE 2021 Opentalks
- Slide(English)
- Common Threat Matrix for CI/CD Pipeline(English)
Oct 14: How to secure your Kubernetes cluster on Google Cloud - セキュアなGKEクラスタのつくりかた (Google Cloud とmercari に学ぶ！Kubernetes の活用法とセキュリティ)
- Slide (Japanese/日本語)
Jul 7: Achieving Security Compliance Monitoring with Open Policy Agent and Rego (Open Policy Agent Rego Knowledge Sharing Meetup)
- Slide (English)
- Video (Japanese/日本語)
Apr 23: Phishing Detection and Automation For Customers -フィッシング対策自動化について (Council of Anti-Phishing Japan(フィッシング対策協議会) 第2回フィッシング対策勉強会)
- Overview and References
- The slide is not published

Oct 17: The State of Messaging Security 2020: メールおよびメッセージングアプリのセキュリティプロトコルの現在
- Documentatin (日本語/Japanese)
Apr 23: Kubernetes Security For Microservices (Kubernetes Meetup Tokyo #30)
Jan 22: Exploitation Fundamentals (Mercari Internal Training)
- Slide (Japanese/日本語) / Slide (English)
- GitHub Repository (English)

Sep 21th: Mercari’s Security Engineering Team: Taking on New Challenges and Supporting a Broad Scope of Functions Across a Flat Team Structure (English / Japanese) - mercan
Sep 16th: セキュリティって本当におもしろい！──「セキュリティ・キャンプ」で講師を務めた二人による“セキュリティよもやま話” (Japanese) - mercan

Oct 19th: Protecting Mercari from Cyberattacks! The Security Team Discusses Who Makes A Good Candidate for the New CSIRT/SOC #WorkWithMercari - mercan
- Japanese
- English

Details are here (Linkedin)
Jan 2023 -: GitLab
Feb 2019 - Jan 2023: Mercari, Inc.
- Team Introduction: Mercari’s Security Engineering Team: Taking on New Challenges and Supporting a Broad Scope of Functions Across a Flat Team Structure
Apr 204 - Jan 2019: Nomura Research Institute, Ltd.
- July 2015 - Jan 2019: Security Engineer - NRI SecureTechnologies, Ltd.
- Apr 2014 - June 2015: Application Engineer
(Education) Keio University, Tokyo, Japan.
- Faculty of Environment and Information Studies
- Apr 2010 - Mar 2014

OSEP (Offensive Security Experienced Penetration Tester) Sep, 2021
- Penetration test, Red Teaming, Antivirus Evasion
GDAT (GIAC Defending Advanced Threats) Jul, 2021
- Purple Teaming, Detecting and responding to adversary attacks
OSCP (Offensive Security Certified Professional) Mar, 2021
- Penetration test, Red Teaming
CKS (Certified Kubernetes Security Specialist) Jan, 2021
- Kubernetes Security
CKA (Certified Kubernetes Administrator) Aug, 2020
- Kubernetes Administration
CISSP (Certified Information Systems Security Professional) Jul, 2020
- Risk Management/Security Engineering/Network Security/Software Development Security
GXPN (GIAC Exploit Researcher and Advanced Penetration Tester) Jul, 2018
- Network/Crypt/Exploitation/x86 assembly
GCFA (GIAC Certified Forensic Analyst) Mar, 2018
- Incident investigation/Incident response
GREM (GIAC Reverse Enginnering Malware) Mar, 2017
- Reverse engineering/x86 assembly/Static and Dynamic malware analysis
情報セキュリティスペシャリスト (Information Security Specialist, issued by IPA) Dec, 2014
応用情報技術者 (Applied Information Technology Engineer, issued by IPA) Jun, 2014