> whoami

Zay Pai Htet

Penetration Tester | Python Lecturer | Cybersecurity Specialist

๐Ÿ“ Myanmar

Experienced Penetration Tester skilled in identifying and mitigating security vulnerabilities across various IT environments. Proficient with industry-standard tools and manual testing techniques, focused on strengthening organisational security through thorough assessments and practical remediation.

~/zaypaihtet
$ cat profile.json
{
  "role":     "Penetration Tester",
  "location": " Myanmar",
  "focus":    ["appsec", "automation", "qa"],
  "open_to":  "security & backend work"
}
$ _

> skills

Technical

Python โ˜…โ˜…โ˜…โ˜…โ˜…

Expert โ€” teaching and shipping production code

Linux โ˜…โ˜…โ˜…โ˜…โ˜…
Node.js โ˜…โ˜…โ˜…โ˜…โ˜…
MySQL โ˜…โ˜…โ˜…โ˜…โ˜…
PHP โ˜…โ˜…โ˜…โ˜…โ˜…
Bash โ˜…โ˜…โ˜…โ˜…โ˜…
AI Integration โ˜…โ˜…โ˜…โ˜…โ˜…
Prompt Engineering โ˜…โ˜…โ˜…โ˜…โ˜…
Automation โ˜…โ˜…โ˜…โ˜…โ˜…

Strongest area

System Design โ˜…โ˜…โ˜…โ˜…โ˜…
UI/UX Design โ˜…โ˜…โ˜…โ˜…โ˜…
DevOps โ˜…โ˜…โ˜…โ˜…โ˜…

Security

Cybersecurity โ˜…โ˜…โ˜…โ˜…โ˜…
Penetration Testing โ˜…โ˜…โ˜…โ˜…โ˜…
API Security โ˜…โ˜…โ˜…โ˜…โ˜…
SQL Injection Prevention โ˜…โ˜…โ˜…โ˜…โ˜…

QA

Automation Testing โ˜…โ˜…โ˜…โ˜…โ˜…
Manual Testing โ˜…โ˜…โ˜…โ˜…โ˜…

Soft skills

Good Communication โ˜…โ˜…โ˜…โ˜…โ˜…

> selected work

all projects โ†’

> experience

Python Lecturer & Full-Stack Developer

NiT College

Apr 2025 โ€” Jun 11 2026

  • Developed ERP, HR, Attendance and POS software.
  • Teaching Python and full-stack development.

Full-Stack Developer

HEXT

May 2026 - Present ยท Myanmar (Burma)

  • Design and develop full-stack web applications and business systems, including CRM, LMS, ERP, HR, Attendance, POS, and custom enterprise solutions.
  • Develop and maintain RESTful APIs, backend services, databases, and responsive frontend applications.
  • Conduct security assessments and penetration testing on web applications and APIs to identify potential vulnerabilities.
  • Test and mitigate common web security risks, including SQL Injection, XSS, authentication and authorization issues, insecure API endpoints, and access-control vulnerabilities.
  • Perform API security testing, vulnerability assessment, and security hardening before production deployment.
  • Manage application deployment and production environments on cloud servers and VPS infrastructure.
  • Configure and maintain Linux servers, web servers, databases, domains, DNS, SSL/TLS certificates, firewalls, and production environments.
  • Implement and maintain CI/CD pipelines for automated building, testing, and deployment.
  • Monitor production systems, analyze logs, troubleshoot incidents, and perform performance and security improvements.
  • Work across the complete software development lifecycle, including system architecture, database design, development, QA, security testing, deployment, monitoring, and maintenance.

Software Tester

Global Wave Technology

Apr 2024 โ€” Apr 2025 ยท Thingangyun

  • Testing API and UI issues.
  • Pen testing to ensure API security.
  • Filtering to prevent SQL injection attacks.
  • Automation testing.

Quality Assurance (QA Software Tester)

Shopdoora

Nov 2023 โ€” Apr 2024 ยท Ahlone

  • Developed comprehensive test cases.
  • Conducted User Acceptance Testing.
  • Pen testing to ensure API security.
  • Filtering to prevent SQL injection attacks.

ICT Teacher

Mercury Private School

Apr 2023 โ€” Dec 2024 ยท Yangon

  • Developed lesson plans using varied teaching methods.
  • Improved student learning outcomes.

> education & certs

Diploma in CCS

Feb 2021 โ€” Mar 2022

Passed with Honors

MCPA Information Technology Passport Examination

Apr 2023 โ€” Oct 2023 ยท Yangon

Passed with Honors

> ctf writeups

all writeups โ†’

> latest writing

all posts โ†’