Chongyang Shi

Senior Software Engineer, Security (2023 - Present)
Software Engineer, Security (2022 - 2023)

Building security, privacy, and safety controls to protect DeepMind's machine learning models and research infrastructure.

Senior Infrastructure Engineer, Security (2021 - 2022)
Backend Engineer, Security (2018 - 2020)

As a senior individual contributor for the security of Monzo's banking infrastructure, I designed and built security infrastructure and applications for the AWS and Kubernetes-based platform, improving its resiliency to external and internal threats. I designed and implemented extensive automations to enforce least privilege, minimise human access to sensitive data, and enable effective auditing at all levels of the infrastructure. Additionally, I provided routine DevSecOps coverage for the platform, and contributed to its long-term security and compliance strategies.

Blog Post: How we secure Monzo’s banking platform

Blog Post: Controlling outbound traffic from Kubernetes

Security Engineer

As a senior security engineer for OVO’s energy technology subsidiary Kaluza, I worked to protect the energy retail platform. My primary focus was the infrastructure security of this cloud-native energy retail platform built on both AWS and GCP; building security tooling and defensive & detective controls for Kubernetes clusters, CI/CD pipelines, managed services. Additionally, I acted as a mentor to junior security engineers on infrastructure security and DevOps; and advised and contributed to platform-level projects from security and compliance perspectives.

Blog Post: Building a secure CI/CD pipeline for Terraform Infrastructure as Code

Blog Post: Kubernetes security monitoring on a decentralised, multi-cluster platform

Christ's College, University of Cambridge

Passed with Distinction