status --check · online · Tacoma, WA

Hi, I'm Oliver Lim.

oliver@portfolio:~

$ whoami

>

I work in cybersecurity — A Student of GLobal Cybersecurity at Western Washington University — Proven History of automation that streamlined manual processes. Six years of warehouse experience on the Costco floor. Completed an Internship securing third-party vendors in Vendor Risk Management. Now I'm studying toward a cybersecurity degree and a career on the offensive side of the fence — pen-testing.

View my work Get in touch
Oliver Lim oliver_lim.jpg

root@oliver:~$ cat about.md

From the warehouse floor to cybersecurity.

I'm a cybersecurity specialist with a growing background across risk, AI automation, and offensive security. Right now that means vendor risk management — assessing the vendors an enterprise depends on and automating the compliance grind that slows security teams down — but I'm building toward a career on the other side of the fence: penetration testing. That range is backed by six years of high-pressure operational experience at Costco, where I learned how a large business operates.

$ cat done.log

  • [x] Reviewed SOC 2, ISO 27001, and PCI documentation across formal vendor risk assessments
  • [x] Built 3 self-initiated automation tools that cut manual compliance tracking by ~75%
  • [x] Presented that work directly to Costco's CIO
  • [x] Completed an A.S. in Global Cybersecurity — 3.9 GPA, President's Honor Roll
  • [x] Earned the VCCC NCYTE Certificate (Active Directory, firewalls, network design)

$ cat doing.log

  • [ ] Working in vendor risk management & compliance as an intern in Costco IT
  • [ ] Pursuing a B.A.S. in Global Cybersecurity at Western Washington University
  • [ ] Studying for the CompTIA Security+ exam
  • [ ] Practicing offensive security on TryHackMe & Hack The Box
  • [ ] Working toward a full-time move into penetration testing

Based in

Tacoma, WA

Studying

B.A.S. Global Cybersecurity, WWU

Currently

Vendor Risk Management

Working toward

Penetration Testing

Oliver Lim with Costco President and CEO Ron Vachris
[ moment ] With Costco President & CEO Ron Vachris
Vendor Risk Management — Impact
0%

Manual compliance labor eliminated via self-built automation

0

PCI ROC vendors covered by the compliance alerting system

0

Employees verified through the automated cross-check tool

$ ls -la ./experience ./education

Where the skills came from.

Vendor Risk Management Intern

Costco IT · Issaquah, WA

Jun 2026 – Present
  • Assesses the security controls of third-party vendors to ensure security compliance.
  • Review vendor compliance documentation — SOC 2 reports, ISO certifications, and PCI documentation — as part of formal vendor risk assessments.
  • Self-identified a manual, time-consuming compliance-tracking gap and independently built an automated alerting system (JavaScript / Google Apps Script) that syncs with Google Sheets, flags expired vendor documents, and auto-emails vendors — covering 81 PCI ROC vendors.
  • Built an AI-powered contract analysis tool using Gemini Gems to support contract and security-language review.
  • Built an employee verification tool that cross-checked vendor-submitted documentation against employment status for 900 employees.
  • These self-initiated tools cut manual compliance-tracking labor by roughly 75% — presented directly to Costco's CIO.
  • Work daily inside Onspring (GRC platform) and CARTS (ticketing) as part of the vendor risk workflow.

Member Service

Costco Wholesale · Federal Way, WA

Sep 2020 – Jun 2026
  • Performed the full range of duties across seven departments: Front End, Membership, Tire Shop, Morning Merchandising, Gas Station, Security, and Cashier.
  • Recognized as Costco Employee of the Month; regularly trained new employees.
  • Sustained ~6 years of tenure across rotating departments — the foundation for the adaptability and stakeholder communication I bring to risk work today.
Oliver Lim holding his Costco Employee of the Month certificate
[ award ] Employee of the Month — Jan 2024

B.A.S., Global Cybersecurity

Western Washington University · Kirkland, WA

Jul 2026 – Jun 2028 (expected)
  • In-progress bachelor's degree building on an associate's in the same field.

A.S., Global Cybersecurity

Highline College

Sep 2022 – Jul 2026
  • Completed with a 3.9 GPA; named to the President's Honor Roll.
  • Started in Computer Science before moving into Global Cybersecurity — the origin of the programming background in C#, Python, and JavaScript.
  • Earned the VCCC NCYTE Certificate in Global Cybersecurity, covering Active Directory management, firewall configuration, and network design.
  • Competed in Capture the Flag competitions through the college's cybersecurity program, plus independent practice on TryHackMe and Hack The Box.

$ ./skills.sh --list

Skills, by the work they support.

Filter by category — every tag below has been used in real coursework, CTF practice, or on the job at Costco IT.

Vulnerability Assessment Network Scanning Nmap Metasploit Burp Suite Wireshark Hashcat Hydra Netcat Gobuster Dirb Kali Linux Wireless Security Auditing Active Directory Firewall Configuration Network Design Vendor Risk Management SOC 2 Review ISO 27001 PCI-DSS PCI ROC Tracking Security Questionnaires Risk Register Management Risk Scoring & SLA Tracking Contract Review Onspring HIPAA OSHA Compliance Python JavaScript C# Google Apps Script API Integration AI Prompt Design Process Automation Linux AWS Executive Presentations Stakeholder Communication Cross-functional Collaboration Training & Mentoring De-escalation Adaptability Time Management

$ git log --oneline ./projects

Projects, professional and personal.

Costco IT · Professional

Vendor Compliance Alerting System

A JavaScript / Google Apps Script automation that reads live vendor data from Google Sheets, detects expired compliance documents, writes status updates back to the sheet, and automatically emails vendors to request renewals — covering 81 PCI ROC vendors that were previously tracked by hand.

Part of the automation that cut manual compliance-tracking labor by ~75%, presented directly to Costco's CIO.
JavaScriptGoogle Apps ScriptGoogle Sheets APIAutomation
Costco IT · Professional

AI Contract Analysis Tool

Built with Gemini Gems to accelerate review of vendor contracts and security-language clauses, flagging terms that need closer legal or security scrutiny.

GeminiAI Prompt DesignContract Review
Costco IT · Professional

Employee Verification Tool

Cross-checks vendor-submitted personnel documentation against employment status, automating a manual verification process across 900 employees.

JavaScriptAutomationCompliance
Personal

Home Network Wireless Security Audit

Audited my own home Wi-Fi network by capturing EAPOL handshakes and running offline password-strength testing, then used the findings to harden the network's configuration.

Wireless SecurityPacket CapturePassword Auditing
Personal

Swing Trading Program

A self-taught software project applying RSI and MACD technical indicators to generate trade signals across a Nasdaq-100 stock screening universe, with an AI/ML confirmation layer currently in exploration.

PythonData AnalysisSelf-Directed

$ cat certifications.json

Certifications.

CompTIA Security+

In Progress

Currently studying toward the exam as part of ongoing security fundamentals training.

VCCC NCYTE Certificate — Global Cybersecurity

Completed · Highline College

Covers Active Directory management, firewall configuration, network design, and network defense.

$ ./contact.sh --init

Let's talk risk, security, or the next role.

Open to conversations about vendor risk, compliance analyst, IT risk, and security analyst roles — and always happy to talk cybersecurity.

Email lim.oliv9@gmail.com Phone (253) 709-0092 LinkedIn /in/oliver-lim-34040a2a3
Location Tacoma, WA