Cybersecurity role on Air Selangor's (Malaysian water utility) Testing & Assurance team: running vulnerability assessments, penetration tests and control validation across infrastructure, cloud, identity and OT environments, tracking remediation, running cyber resilience drills, and producing assessment reports and assurance updates.