Palo Alto Networks
NGFW deployment and firewall management at Singtel
Fig. 1. Identity
ZTZuriel ShanleyTanyory✓
Using AI & automation to solve security issues
- Role
- Forward Deployed AI & Automation Security Engineer @ Singtel
- Founder
- CiTaDel Cybersecurity Solutions, Mar 2023 to May 2026
- Location
- Singapore UTC+8
- Education
- Bachelor of Computing in Information Security, National University of Singapore
- Award
- First Place, Singtel BIG Fearless Find 2026 (Round 1), 2026
- zurielst@u.nus.edu
- Resume
- DOWNLOAD PDF
- deep learning models trained for security and vision tasks
- 40+
- firewalls fed by one automated IOC pipeline
- 200+
- threat detection uplift from AI-assisted SOC workflows
- Up to 90%
- of this site's assistant grounded in published profile data
- 100%
Fig. 2. Introduction
Hello #
- I am Zuriel Shanley Tanyory, a Forward Deployed AI and Automation Security Engineer at Singtel, turning security operations into deterministic, auditable automation.
- I founded and ran CiTaDel Cybersecurity Solutions for three years, bringing industry-grade SOC defence to SMEs at a price they could pay.
- First Place at Singtel BIG Fearless Find 2026 (Round 1), reading Information Security at NUS, and shipping to production the whole way.
304 contributions in the last year
LessMore
Fig. 3. Worked with
Worked with #
Vendor and product names identify technologies Zuriel has hands-on experience with. No affiliation, sponsorship, or endorsement is implied.
Security #
Fig. 4. Capabilities
I learned security by doing the whole loop: attack, defend, investigate.
Read moreRead less
I ran Lockheed's Cyber Kill Chain against lab targets, performed a Blueborne exploit on a vulnerable Android phone with Kali running on my own device, and pentested web applications with OWASP ZAP and Burp Suite, from DVWA to a live ASP.NET app. I wrote my own Python malware, obfuscated and encrypted it, then took it apart again with Ghidra and IDA to learn x86 from both sides of the fight. I hardened a CentOS file server with OSSEC, firewalld, a host IPS, ACLs and BIOS encryption, configured Palo Alto next-gen firewalls and VPN tunnels, and worked EnCase, Autopsy, FTK Imager and Memoryze through a full forensics case study. In my own time I run Suricata, Snort and Zeek.
- Web application pentestingOWASP Top 10, OWASP ZAP, Burp Suite
- Reverse engineeringGhidra, IDA, x86 assembly
- Malware analysisStatic and dynamic analysis
- Digital forensicsEnCase, Autopsy, FTK Imager
- Secure web developmentJun 2020ASP.NET Razor Pages
- Web developmentOct 2019Self-taught HTML, CSS, JavaScript, wow.js
- CryptographyOct 2019An Enigma machine started it
- Network infrastructureCisco, Palo Alto NGFW, FortiGate
- Server and cloud hardeningCentOS, RedHat, OSSEC, firewalld
AI & Automation
Python has been mine since December 2016: Twilio, TensorFlow, Keras, Pandas, smtplib, sockets, cryptography. In 2020 I went deep on deep learning.
Read moreRead less
I trained more than 40 CNN models to reach roughly 70% accuracy on food classification and emoji prediction, built an RNN autocorrect judged on word error rate, and published both write-ups. The same instinct now earns its keep at work: at Singtel I automated Akamai WAF reporting, turning alerts, logs and traffic data into reports analysts actually read. Underneath it all sit boring, load-bearing foundations: object-oriented programming in C# and functional programming.
- PythonDec 2016Twilio, TensorFlow, Keras, Pandas, smtplib, cryptography, sockets
- Deep learningApr 2020RNN, CNN, NLP
- Python automationAkamai WAF API reporting integration
- Programming foundationsObject-oriented (C#) and functional programming
Founder
CiTaDel started as a conviction that SMEs deserve industry-grade defence at a price they can pay.
Read moreRead less
For three years I ran it: an affordable, open-source SOC with EDR and SOAR at the core, SOC solution cost down 80%, threat detection up by as much as 90%, and deep learning folded into SOC workflows to cut false positives by 20%. The founder muscle came from Genesis, where I served as Vice-President of Startup and was nominated into the Zero to One entrepreneurship program with Meet Ventures and NUS Business School. CiTaDel wound down in May 2026 when I joined Singtel; the lessons did not.
- SOC architectureEDR and SOAR on open source
- AI in security operationsDeep learning in SOC workflows
- Zero to OneMVP building with Meet Ventures and NUS Business School
Fig. 5. Stack
Stack #
Languages
- Python
- TypeScript
- JavaScript
- C#
- x86 Assembly
- HTML & CSS
Security Operations
- Palo Alto NGFW
- FortiGate
- Suricata
- Snort
- Zeek
- OSSEC
- VMware Carbon Black
Offense & Forensics
- Kali Linux
- Burp Suite
- OWASP ZAP
- Ghidra
- IDA
- EnCase
- Autopsy
- FTK Imager
AI & Automation
- TensorFlow
- Keras
- Pandas
- Cloudflare Workers AI
- Azure AI Foundry
- Power BI
Cloud & Infrastructure
- Cloudflare Workers
- CentOS
- RedHat
- Cisco
- Akamai
Workflow
- Git
- GitHub
- GitHub Actions
- VS Code
Fig. 6. Selected work
Selected work #
Security reporting automation, Singtel
Akamai WAF Automation
May 2026 to Aug 2026
During my Singtel internship I built a Python automation that integrates Akamai WAF APIs to extract security risk alerts, logs and network traffic data, transforming raw security events into structured reports with technical documentation and visual diagrams.
Read moreRead less
Analysts got better threat visibility, cleaner operations monitoring, and faster reporting.
- Python
- Akamai WAF APIs
- Technical documentation
Internal work, described at resume level.
Founder, open-source SOC
CiTaDel SOC
Mar 2023 to May 2026
I founded CiTaDel to bring industry-grade protection to SMEs and consumers through affordable, open-source security.
Read moreRead less
I architected and ran a SOC with EDR and SOAR at its core, cut SOC solution cost by 80%, lifted threat detection by up to 90%, and integrated deep learning models into SOC workflows that shrank false positives by 20%.
- Open-source SOC
- EDR
- SOAR
- Deep learning
Service wound down in May 2026; the site stays up as a record.
Full-stack lead under uniform
SAF Digitization App
Jan 2023 to Mar 2023
In the Singapore Armed Forces I led a four-person team building a 3-tier web application that digitized paper-based military processes.
Read moreRead less
HTML, CSS, JavaScript, PHP, Bootstrap and MySQL; the result improved data accuracy, cut processing time and paper waste, and raised efficiency while lowering costs by up to 20%.
- HTML
- CSS
- JavaScript
- PHP
- Bootstrap
- MySQL
Internal system: no demo, no screenshots.
Vendor security risk assurance, Singtel
ConfigProof AI
May 2026 to Aug 2026
In the same Singtel internship I developed ConfigProof AI for vendor security risk assurance. This card deliberately stops at the resume line: internal work stays internal.
Described at resume level only.
Fig. 7. Timeline
Timeline #
Singtel
Current organization
- role
Forward Deployed AI & Automation Security Engineer
Aug 2026 to present
Read moreRead less
I build customised AI and automation solutions for Singtel MSSP with SMEs.
- role
Cybersecurity Consultant Intern
May 2026 to Aug 2026
Read moreRead less
Akamai WAF API automation for reporting; developed ConfigProof AI for vendor security risk assurance.
CiTaDel Cybersecurity Solutions
- role
Founder
Mar 2023 to May 2026
Read moreRead less
Affordable, open-source SOC for SMEs: 80% lower SOC cost, up to 90% detection uplift, deep learning in SOC workflows cutting false positives by 20%.
Singapore Armed Forces
- role
Full-Stack Web Developer
Jan 2023 to Mar 2023
Read moreRead less
Led a four-person team digitizing paper-based processes with a 3-tier web application; efficiency and cost improved by up to 20%.
NCS Pte Ltd
- role
Cybersecurity Consultant Intern
Aug 2021 to Feb 2022
Read moreRead less
Installed, configured and troubleshot EDR for government-managed endpoints: 40% increase in threat detection, 99.9% uptime, and recognition as the Carbon Black subject matter expert.
NullSec
- cca
Head of Publicity
Apr 2019 to May 2021
Read moreRead less
Helped organize the Lag n Crash inter-poly CTF and plan the YCEP CTF and the annual Hack'n'Flag CTF.
Genesis
- cca
Vice-President of Startup
Apr 2019 to May 2021
Read moreRead less
Nominated into the Zero to One Entrepreneurship Program with Meet Ventures and NUS Business School; the runway CiTaDel launched from.
Homeless Hearts of Singapore
- cca
Volunteer
Jun 2021 to Dec 2022
Read moreRead less
Befriended and distributed food and basic necessities to people in need during the pandemic.
Fig. 8. Education
Education #
National University of Singapore
Bachelor of Computing in Information Security
Aug 2024 to May 2028
Reading Information Security while working at Singtel.
Ngee Ann Polytechnic
Diploma in Cybersecurity & Digital Forensics
Apr 2019 to May 2022
Graduated with a CGPA of 3.82/4, with a certification in Advanced Computing Mathematics.
Fig. 9. Accolades
Accolades #
Certifications
Cisco Cyber Threat Management Certificate
Cisco
Recognized vendor certification in cyber threat management.
View credential ↗
Fortinet Certified Associate Cybersecurity
Fortinet
20 Oct 2023 to 20 Oct 2025
Earned to stay sharp on network security; validity dates shown as they are.
View credential ↗
FortiGate 7.4 Operator Self-Paced Course
Fortinet
Taken during National Service to stay current; familiar ground after learning Palo Alto firewalls at poly.
View credential ↗
CyberArk Certified Trustee
CyberArk · 2021
Taken during my NCS internship; passed with 80% or higher on the first attempt.
View credential ↗
CyberArk Introduction to Privileged Access Management
CyberArk · 2021
Privileged access management fundamentals, completed during the NCS internship.
View credential ↗
VMware Carbon Black Cloud Fundamentals
VMware · 2021
Hands-on training on installing, upgrading and troubleshooting Carbon Black EDR. NCS recognized me as their Carbon Black subject matter expert.
View credential ↗
NUS Zero To One Entrepreneurship Program
NUS Business School · 2021
Selected through Genesis: six months of MVP building and founder networking with Meet Ventures and NUS Business School.
View credential ↗Awards
First Place, Singtel BIG Fearless Find 2026 (Round 1)
Singtel · 2026
The newest headline on the wall: first place in Round 1 of Singtel BIG Fearless Find 2026.
View credential ↗
SingTel Cyber Security Cadet Scholarship
SingTel · 2021 to 2022
Awarded in my second year at Ngee Ann Polytechnic. It opened the door to my NCS internship, and years later I joined Singtel for real. The arc completed itself.
View credential ↗
MINDEF Bug Bounty Programme
MINDEF Singapore · 2019
Selected through NullSec to take part in MINDEF's bug bounty programme: finding, exploiting and reporting real vulnerabilities, ethically.
View credential ↗
Homeless Hearts of Singapore, Certificate of Appreciation
Homeless Hearts of Singapore · 2021
For volunteering through the pandemic: befriending people and distributing food and basic necessities.
View credential ↗
Cyber Youth Singapore EAE Hackathon, Certificate of Appreciation
Cyber Youth Singapore · 2020
Volunteered as an EAE consultant and conference panelist, guiding youths through their early-admission applications into poly.
View credential ↗CTF results
Cyber Defender Discovery Camp 2020
DSTA · 2020
41st of 237 teams (Senior category)
Six certifications from one camp: Gold in Basic Reverse Engineering, Silver in Using Metasploit, Open Source Intelligence and Web Vulnerabilities, Bronze in Getting Started with Kali Linux, and recognition in Machine Learning in Cybersecurity.
GovTech Stack the Flag CTF
GovTech CSG · 2020
Participant, Polytechnic and University category
Teamed up with friends for GovTech's national CTF.
Cyber Youth Singapore Camp CTF
Cyber Youth Singapore · 2019
5th place
Four-day camp with talks and workshops by industry leaders. Held third in the CTF for a stretch and finished fifth. The trajectory started early.
Shopee Code League
Shopee · 2020
Participant
Competitive programming and data challenges outside the security lane.
Youth Cyber Exploration Programme (YCEP)
CSA Singapore · 2020
Participant
CSA's Youth Cyber Exploration Programme. I have been on both sides of YCEP: participant here, CTF planner with NullSec.
Publications
Food Image Classification Using Convolutional Neural Network with LSTM and GRU
2020 · Report (DOCX)
Open publication ↗Emoji Prediction and Autocorrect Using Recurrent Neural Network
2020 · Report (DOCX)
Open publication ↗Fig. 10. Products
Products #
Cinderella Shoes
Oct 2020 to Mar 2021
I led a team building a 3-tier secure e-commerce app on ASP.NET for our Secure Software Development assignment, wiring in Stripe for payments and reCAPTCHA for bot mitigation. We reported 0% transaction failure through payment.
- ASP.NET
- Razor Pages
- Stripe
- reCAPTCHA
Origin story
Project Xynthea
Jan 2018 to May 2018
My first security build: a three-factor authentication system in Python using Twilio one-time passwords with MD5 and SHA-256 hashing. MD5 reads dated on a security dossier today, which is exactly why this ships as an origin story. It marks where the obsession started, not where it ended.
- Python
- Twilio OTP
- MD5
- SHA-256
No public repository.
PanPath-Redactor
Public tooling for redacting Palo Alto PAN-OS configuration exports before they are shared for review.
- Python
- PAN-OS
edl-akamai
A connector between External Dynamic List infrastructure and Akamai, published as a public repository.
- Python
Palo Alto EDL IOC Manager
An add-only IOC manager for Palo Alto External Dynamic List servers: engineers add new indicators to local EDL text files while the script records the change, updates the trusted snapshot, and sends an email notification to the right people.
- Python
- PAN-OS EDL
Inscribe
A one-command pipeline that turns YouTube videos into clean transcripts and Fabric-powered summaries and insights using local models. The AI & Automation act, working outside security.
- Python
- Whisper
- Fabric
Facial-Recognition-Project
Facial recognition built on the LBHF engine and TensorFlow: hands-on machine learning evidence with the code public.
- Python
- TensorFlow
- LBHF
Contact Tracing App
2020
A Python contact tracing app built in 2020 while contact tracing was a live national problem, scoped as a beta for Ngee Ann Polytechnic. No public repo backs it, so it ships as a story, not a link.
- Python
No public repository.
Fig. 11. Testimonials
Testimonials #
CiTaDel has proven to be an invaluable cybersecurity asset, safeguarding the personal computers of all my family members. My decision to adopt CiTaDel as our cybersecurity solution was driven by its exceptional behavioral analysis capabilities, providing a proactive defense against emerging threats. The monthly CiTaDel Threat Report further enhances its efficacy, offering real-time insights that empower me to fortify and shield not only my own device but also those of my cherished loved ones.
Tan Hock Guan
Retired Senior Lecturer, Ngee Ann Polytechnic
Embarking on CiTaDel's free trial, I discovered an exceptional antivirus tool. Its monthly reports not only bolster my computer's defenses but also shield it from potential threats. CiTaDel's affordability sets it apart, and its prowess in swiftly eradicating unintentionally installed malware surpasses other market options. As a research associate at Crafthealth, CiTaDel has proven indispensable in upholding our commitment to regulatory compliance, including NIST 800, GDPR, and HIPAA, safeguarding our pharmaceutical data with unmatched efficacy.
Velicia Seraphine
Research Associate, Crafthealth
Fig. 12. FAQ
FAQ #
What does a Forward Deployed AI & Automation Security Engineer do?
I sit with Singtel's managed security services business and build customised AI and automation solutions for the SMEs it protects. Forward deployed means I work close to the customer problem rather than in a back room: understand the security workflow first, then automate it.
You work full-time and study at the same time?
Yes. I am reading Information Security at NUS (Bachelor of Computing, Aug 2024 to May 2028) while working at Singtel. The degree finishes in 2028; the work does not wait for it.
What are you open to?
Good conversations. I am settled at Singtel and NUS through 2028, and I stay open to security community work, CTFs, speaking, and hard problems in AI and security operations. Email is the fastest way to reach me: zurielst@u.nus.edu.
Which languages do you speak?
English (native), Chinese (conversational), Bahasa Indonesia (basic).
Fig. 13. Insights
Visitor insights #
A committed, cookieless view of how this dossier is read.
- 30-day visits
- 30
- 30-day views
- 30
- Busiest day
- 30 visits
VisitsViews
Over the trailing 30 days, Cloudflare Web Analytics recorded 30 visits and 30 views. The busiest day was 05 Oct 2026 with 30 visits.
Sampled estimate: at least one daily count was reported from an adaptively sampled interval.