status --check · online · Tacoma, WA

Hi, I'm Oliver Lim.

oliver@portfolio:~

$ whoami

>

A Student of Global Cybersecurity at Western Washington University. Proven History of building and implementing automation to streamlined manual processes. Six years of warehouse experience on the Costco floor. Completed an Internship securing third-party vendors in Vendor Risk Management for Costco. Now I'm studying toward a cybersecurity degree and a career in offensive security.

Oliver Lim oliver_lim.jpg

root@oliver:~$ cat about.md

From the warehouse floor to cybersecurity.

I'm a cybersecurity specialist with a growing background across risk, AI automation, and offensive security. I have proven experience through my Vendor Risk Management internship, — assessing the vendors Costco depends on and automating the manual tasks that slows security teams down —. I'm building my offensive security skills to eventually become a pen-tester. experience is also followed by years of high-pressure operational experience at Costco, where I learned how a large business operates.

$ cat done.log

  • [x] Analyze the security controls and posture to ensure security regulatory compliance of third party vendors
  • [x] Reviewed compliance documents such as SOC 2, ISO 27001, and PCI documentation across formal vendor risk assessments
  • [x] Built numerous self-initiated automation tools that cut manual labor by ~75%
  • [x] Presented directly to Costco's CIO
  • [x] Completed an A.S. in Global Cybersecurity — 3.9 GPA, President's Honor Roll
  • [x] Earned the VCCC NCYTE Certificate (Active Directory, firewalls, network design)

$ cat doing.log

  • [ ] Pursuing a B.A.S. in Global Cybersecurity at Western Washington University
  • [ ] Studying for the CompTIA Security+ exam
  • [ ] Practicing offensive security on TryHackMe & Hack The Box
  • [ ] Working toward a full-time move into penetration testing

Based in

Tacoma, WA

Studying

B.A.S. Global Cybersecurity, WWU

Summer Internship 2026

Vendor Risk Management

Working toward

Penetration Testing

Oliver Lim with Costco President and CEO Ron Vachris
[ moment ] With Costco President & CEO Ron Vachris
Vendor Risk Management — Impact
0%

Manual compliance labor eliminated via self-built automation

0

PCI ROC vendors covered by the compliance alerting system

0

Employees verified through the automated cross-check tool

$ ls -la ./experience ./education

Proven Experience

Vendor Risk Management Intern

Costco IT · Issaquah, WA

Summer 2026
  • Assesses the security controls of third-party vendors to ensure security compliance.
  • Review vendor compliance documentation — SOC 2 reports, ISO certifications, and PCI documentation — as part of formal vendor risk assessments.
  • Self-identified a manual, time-consuming compliance-tracking gap and independently built an automated alerting system (JavaScript / Google Apps Script) that syncs with Google Sheets, flags expired vendor documents, and auto-emails vendors — covering 81 PCI ROC vendors.
  • Built an AI-powered contract analysis tool using Gemini Gems to support contract and security-language review.
  • Developed and implemented a compliance document tracking system that streamlined the management of vendor compliance documentation.
  • Built an employee verification tool that verified the employment status and contact information of 900 employees.
  • These self-initiated tools cut manual compliance-tracking labor by roughly 75% — presented directly to Costco's CIO.
  • Work daily inside Onspring (GRC platform) and CARTS (ticketing) as part of the vendor risk workflow.

Member Service

Costco Wholesale · Federal Way, WA

Sep 2020 – Jun 2026
  • Performed the full range of duties across seven departments: Front End, Membership, Tire Shop, Morning Merchandising, Gas Station, Security, and Cashier.
  • Recognized as Costco Employee of the Month; regularly trained new employees.
  • Sustained ~6 years of tenure across rotating departments — the foundation for the adaptability and stakeholder communication I bring to risk work today.
Oliver Lim holding his Costco Employee of the Month certificate
[ award ] Employee of the Month — Jan 2024

B.A.S., Global Cybersecurity

Western Washington University · Kirkland, WA

Jul 2026 – Jun 2028 (expected)
  • In-progress bachelor's degree building on an associate's in the same field.

A.S., Global Cybersecurity

Highline College

Sep 2022 – Jul 2026
  • Completed with a 3.9 GPA; named to the President's Honor Roll.
  • Started in Computer Science before moving into Global Cybersecurity — the origin of the programming background in C#, Python, and JavaScript.
  • Earned the VCCC NCYTE Certificate in Global Cybersecurity, covering Active Directory management, firewall configuration, and network design.
  • Competed in Capture the Flag competitions through the college's cybersecurity program, plus independent practice on TryHackMe and Hack The Box.

$ ./skills.sh --list

Skills, by the work they support.

Filter by category — every tag below has been used in real coursework, CTF practice, or on the job at Costco IT.

Vulnerability Assessment Network Scanning Nmap Metasploit Burp Suite Wireshark Hashcat Hydra Netcat Gobuster Dirb Kali Linux Wireless Security Auditing Active Directory Firewall Configuration Network Design Vendor Risk Management SOC 2 Review ISO 27001 PCI-DSS PCI ROC Tracking Security Questionnaires Risk Register Management Risk Scoring & SLA Tracking Contract Review Onspring HIPAA OSHA Compliance Python JavaScript C# Google Apps Script API Integration AI Prompt Design Process Automation Linux AWS Executive Presentations Stakeholder Communication Cross-functional Collaboration Training & Mentoring De-escalation Adaptability Time Management

$ git log --oneline ./projects

Projects, professional and personal.

Costco IT · Professional

Vendor Compliance Alerting System

A JavaScript / Google Apps Script automation that reads live vendor data from Google Sheets, detects expired compliance documents, writes status updates back to the sheet, and automatically emails vendors to request renewals — covering 81 PCI ROC vendors that were previously tracked by hand.

Part of the automation that cut manual compliance-tracking labor by ~75%, presented directly to Costco's CIO.
JavaScriptGoogle Apps ScriptGoogle Sheets APIAutomation
Costco IT · Professional

AI Contract Analysis Tool

Built with Gemini Gems to accelerate review of vendor contracts and security-language clauses, flagging terms that need closer legal or security scrutiny.

GeminiAI Prompt DesignContract Review
Costco IT · Professional

Employee Verification Tool

Cross-checks vendor-submitted personnel documentation against employment status, automating a manual verification process across 900 employees.

JavaScriptAutomationCompliance
Personal

Home Network Wireless Security Audit

Audited my own home Wi-Fi network by capturing EAPOL handshakes and running offline password-strength testing, then used the findings to harden the network's configuration.

Wireless SecurityPacket CapturePassword Auditing
Personal

Swing Trading Program

A self-taught software project applying RSI and MACD technical indicators to generate trade signals across a Nasdaq-100 stock screening universe, with an AI/ML confirmation layer currently in exploration.

PythonData AnalysisSelf-Directed

$ cat certifications.json

Certifications.

CompTIA Security+

In Progress

Currently studying toward the exam as part of ongoing security fundamentals training.

VCCC NCYTE Certificate — Global Cybersecurity

Completed · Highline College

Covers Active Directory management, firewall configuration, network design, and network defense.

$ ./contact.sh --init

Let's talk.

Open to opportunities.