Hi, I’m Zachary Phoon, currently pursuing a Bachelor of Engineering (Honours) in Information and Communications Technology (Information Security) at the Singapore Institute of Technology. My fascination with the IT industry began in my childhood — sparked by the innovations that continue to reshape lives and drive the future. That curiosity evolved into a deep passion for cybersecurity, ethical hacking, and cloud technologies, leading me to earn a Diploma in Cybersecurity & Digital Forensics from Temasek Polytechnic.
I’ve had the opportunity to explore diverse work environments — from cloud auditing at PwC, to retail and customer service, to volunteering during school breaks — each experience shaping my adaptability, leadership, and ability to thrive under pressure. Beyond the screen, I’m a gym enthusiast who believes in maintaining work-life balance while continuously improving both mind and body. Friends know me as a keen learner and friendly personality with an unstoppable drive and, as I like to say, a killer backstory to tell.
Python
HTML
Java
Javascript
CSS
MySQL
PHP
BASH
C#
C
Assembly
Singapore Institute of Technology
Currently Pursuing
Bachelor's Degree With Honours in Information and Communications Technology (Information Security)
Temasek Polytechnic
Diploma in Cybersecurity & Digital Forensics
St. Gabriel's Secondary School
GCE 'O' Levels
Deep work, smart breaks. FocusLock is a cross‑platform Flutter app that helps you plan focused study sessions, take restorative mini‑breaks, and track progress across devices. It combines structured timers (Pomodoro, Time Blocking, and more) with light gamification, rich personalization, and a serverless backend so your data stays in sync wherever you work.
Used in partnership with Telegram and Google Location API for a Government Projects. Telegram for live location sharing then feeding to database and then given to Google Routes API to calculate the time till of arrival on stated mode of transport. This will then feed onto Google Looker Studio for visual display on a dynamic Website.
A malicious device that is disguised as a keyboard, a payload will be delivered once the keyboard is connected into the USB port of a windows computer, allowing the attacker to view the contents of the victim machine and extract data.
This is to spread awareness of USB port vulnerability.