Son Thai
What do you do at OPSWAT?
At OPSWAT, I work as a Software Engineer in the MetaDefender OT Security team. My role involves in-depth research into OT/ICS systems, with the aim of understanding the specifics of devices from various manufacturers such as Siemens, ABB, Allen Bradley, Schneider, etc., in order to extract device information to support the Smart Asset Profiling feature of our product.
Additionally, I conduct extensive research on the use cases of OT/ICS protocols to recreate experimental environments similar to real-world scenarios. This is to facilitate the testing of advanced features within our product. I also provide support to other product teams such as MetaDefender Industrial Firewall, MetaDefender IT-OT Access, and MetaDefender Netwall.
Furthermore, I assist in setting up the OT racks environment in CIP labs and mobile labs in Vietnam, as well as in OPSWAT offices in other regional countries.
If you could describe OPSWAT in one word, what would it be and why?
I would describe OPSWAT as "innovative," as the company consistently stays abreast of the latest technological advancements, offering continual opportunities for employees to learn and grow every day.
As part of my role, I had the privilege of engaging with cutting-edge technologies in safeguarding critical infrastructure in both IT and OT domains. This experience provided me with a challenging yet rewarding opportunity to delve into the intricate realm of protecting vital systems. I found it intellectually stimulating and professionally fulfilling.
Your Time at OPSWAT
How did you begin your career in the cybersecurity industry?
When I initially joined OPSWAT, I became a member of the MetaDefender OT Security team, which was in its nascent stages of development. This introduction immersed me in the world of OT and highlighted its vulnerabilities, emphasizing the urgent necessity to devise a solution for safeguarding OT environments against malicious actors. The inception of MetaDefender OT Security marked the beginning of my cybersecurity journey, as I actively contributed to addressing this pressing need and embarked on a path of enhancing OT security measures.
How has the company changed since you first started?
OPSWAT has changed a lot since I started. The company scale has increased significantly, with the office being expanded with more floors in an open-space style to encourage team collaboration and provide more space for staff’s development in fully equipped and modern facilities.
What do you do to protect critical infrastructure?
Among the 16 critical infrastructures designated by the Cybersecurity & Infrastructure Security Agency (CISA), the Energy Sector holds a distinctive position as "uniquely critical." It serves as a fundamental enabler for all other critical infrastructure sectors. Safeguarding critical infrastructure from cybersecurity threats within regulated environments, such as the Energy Sector, is paramount to ensuring the functionality and stability of our interconnected world.
What is the best career lesson you’ve learned so far?
During my work in the security environment, the biggest lesson I've learned is the importance of not clicking on unfamiliar links. Phishing attacks often target human factors, exploiting a lack of vigilance to infiltrate systems. A simple action like clicking on an unidentified link can lead to serious consequences such as information leaks or malware infections.
To avoid these risks, raising cybersecurity awareness among all employees is crucial. Building a strong security culture within the organization, where everyone understands and adheres to basic security principles, is key to protecting the company against cyber threats.
What do you like most about your direct team?
What I like most about my direct team is the spirit of collaboration and constant support. Everyone is always ready to share knowledge, help each other overcome challenges, and collectively come up with creative solutions to complex problems. This teamwork not only creates a positive and effective work environment but also helps each individual develop and progress in their work.
The You Outside of Work
What word would you choose to describe yourself?
I would choose “enthusiastic” to describe myself.
My enthusiasm in work is characterized by unwavering commitment and passion in every aspect of my job. I consistently put forth maximum effort to accomplish tasks to the best of my abilities. This enthusiasm not only drives me to achieve personal goals but also fosters a positive atmosphere and encourages my colleagues, thereby contributing to the organization's growth. I believe that enthusiasm is not only crucial for success but also a key driver for progress and innovation in every project.
What would people be surprised to know about you?
In addition to my team's work, I also participate in the training process of the company's Fellowship program for students. Furthermore, I support the OPSWAT Academy team in developing training courses on PLC device security.
I also have a Bachelor's degree in Control Engineering and Automation Technology, along with a Master's degree in Information Technology. This educational background has provided me with a broader, deeper, and clearer understanding of OT and ICS systems. Additionally, I leverage knowledge and technologies from the field of Information Technology to enhance the research process and support our team's product development more effectively.
What keeps you motivated and focused?
I strive to continuously elevate myself and aspire to become the best version of who I am each day. With this mindset, I consistently push myself to exert maximum effort and maintain an unwavering commitment to lifelong learning.
