johnnynguyen.cloud · plain version
Johnny Nguyen
I'm a network infrastructure analyst at SHAZAM, finishing up my MIS degree at Iowa State, and working my way into security
what I'm going for
Security Analyst roles, whether that's GRC and risk, IAM, cloud security, or a SOC. Starting after Aug 2027, or sooner for the right team
experience
SHAZAM · Network Infrastructure Analyst I2026-08
I help keep a payments network connected and organized: network planning, working with vendors, and keeping our records and reports accurate
HACC × TryHackMe · Cyber Kick-Off, event lead2026-09
My first time hosting a big event! 30+ people showed up and I sent out their free TryHackMe Premium codes live. Mid-event the script editor's autocomplete turned
trueintotand the send menu just vanished, so I found it, fixed it, and kept goingEvery code to one person, exactly once, with every send logged. Pretty much access provisioning with an audit trail
Microsoft · Datacenter Technician (contract)2026-04
Break-fix on production Azure servers and network gear, with strict change management on everything
Iowa State · MIS 4450 enterprise security labs2026-01
Built user access from scratch in Active Directory with OUs, security groups, and NTFS permissions so access came from groups instead of one-off grants. Then the forensics side: tracked down stolen FTP creds, a keylogger hiding in a scheduled task, and the phishing email that started it all
The closest thing to hands-on IAM work I've done so far
Hy-Vee · Network & Systems Intern2025-05
Led our five-person intern team on a 200-store refresh: 1,500+ computers and 45 Dell servers. I also chained a sysadmin's three-step fix into one script that ran on its own, so nobody had to babysit every machine
Best Buy Geek Squad · Consultation Agent2023-09
Two years of helping people who just wanted their stuff to work. This is where I learned to explain tech to anyone
skills
really good at
- Explaining tech to non-tech people (Geek Squad and every job since)
- Teaching beginners security (club events + my study tools)
- Documentation & keeping records accurate (every day at SHAZAM)
- Excel & Salesforce reports, vendor calls (every day at SHAZAM)
comfortable with
- IP addressing, NAT, IPAM (SHAZAM)
- Intune device management (SHAZAM)
- Active Directory users, groups & permissions (labs + help desk)
- Giving people only the access they need (labs + my AWS project)
still learning
- PowerShell (labs + Hy-Vee)
- Configuring switches (my Net+ weak spot, working on it!)
- Microsoft Entra ID (SC-900, SC-300 next)
- MFA & single sign-on (studying it)
certs
projects
- Security+ Study Tool. 220 practice questions covering every Security+ objective, plus the drill I wish I had: the lookalike terms the exam loves to trick you with · try it · source
- Net+ Visual Lab. I failed every switch question on the Network+ hands-on part, so I built the lab I needed. Build a network, ping across it, and watch the packet travel · try it · source
- AWS Cloud Security Posture Lab. Locked down a multi-account AWS setup with least-privilege access, GuardDuty, and logging, and spent exactly $0.00 doing it · the write-up
TryHackMe
Campus Ambassador · cohort 1 (one of 30 worldwide). 63 rooms done, 40 day streak. my profile
- Pre Security 31/31 · finished! networking, how the web works, OS basics, attacks & defenses
- Cyber Security 101 22/55 · Linux, Windows & Active Directory, command line, Wireshark, tcpdump, Nmap
Cyber Kick-Off: My first on-campus event as ambassador, with the Hacking & Cybersecurity Club. Over 30 people swung by and claimed a free semester of TryHackMe Premium. We got everyone set up, walked them through their first offensive security room, then their first CTF. Two challenges (an easy crypto one and a medium web one) and two winners who took home a cert voucher and a year of Premium!