> whoami
Zay Pai Htet
Penetration Tester | Python Lecturer | Cybersecurity Specialist
๐ Myanmar
Experienced Penetration Tester skilled in identifying and mitigating security vulnerabilities across various IT environments. Proficient with industry-standard tools and manual testing techniques, focused on strengthening organisational security through thorough assessments and practical remediation.
$ cat profile.json { "role": "Penetration Tester", "location": " Myanmar", "focus": ["appsec", "automation", "qa"], "open_to": "security & backend work" } $ _
> skills
Technical
Python
โ
โ
โ
โ
โ
Expert โ teaching and shipping production code
Linux
โ
โ
โ
โ
โ
Node.js
โ
โ
โ
โ
โ
MySQL
โ
โ
โ
โ
โ
PHP
โ
โ
โ
โ
โ
Bash
โ
โ
โ
โ
โ
AI Integration
โ
โ
โ
โ
โ
Prompt Engineering
โ
โ
โ
โ
โ
Automation
โ
โ
โ
โ
โ
Strongest area
System Design
โ
โ
โ
โ
โ
UI/UX Design
โ
โ
โ
โ
โ
DevOps
โ
โ
โ
โ
โ
Security
Cybersecurity
โ
โ
โ
โ
โ
Penetration Testing
โ
โ
โ
โ
โ
API Security
โ
โ
โ
โ
โ
SQL Injection Prevention
โ
โ
โ
โ
โ
QA
Automation Testing
โ
โ
โ
โ
โ
Manual Testing
โ
โ
โ
โ
โ
Soft skills
Good Communication
โ
โ
โ
โ
โ
> selected work
all projects โ
featured
NiT College
Website and internal systems for NiT College.
featured
Learn With NiT
E-learning platform for the NiT academy.
featured
MyanmarConnect
Find local services and connect with skilled professionals across Myanmar.
featured
KalaySafe
Transparent parental controls built for Myanmar families.
> experience
Python Lecturer & Full-Stack Developer
NiT College- Developed ERP, HR, Attendance and POS software.
- Teaching Python and full-stack development.
Full-Stack Developer
HEXT- Design and develop full-stack web applications and business systems, including CRM, LMS, ERP, HR, Attendance, POS, and custom enterprise solutions.
- Develop and maintain RESTful APIs, backend services, databases, and responsive frontend applications.
- Conduct security assessments and penetration testing on web applications and APIs to identify potential vulnerabilities.
- Test and mitigate common web security risks, including SQL Injection, XSS, authentication and authorization issues, insecure API endpoints, and access-control vulnerabilities.
- Perform API security testing, vulnerability assessment, and security hardening before production deployment.
- Manage application deployment and production environments on cloud servers and VPS infrastructure.
- Configure and maintain Linux servers, web servers, databases, domains, DNS, SSL/TLS certificates, firewalls, and production environments.
- Implement and maintain CI/CD pipelines for automated building, testing, and deployment.
- Monitor production systems, analyze logs, troubleshoot incidents, and perform performance and security improvements.
- Work across the complete software development lifecycle, including system architecture, database design, development, QA, security testing, deployment, monitoring, and maintenance.
Software Tester
Global Wave Technology- Testing API and UI issues.
- Pen testing to ensure API security.
- Filtering to prevent SQL injection attacks.
- Automation testing.
Quality Assurance (QA Software Tester)
Shopdoora- Developed comprehensive test cases.
- Conducted User Acceptance Testing.
- Pen testing to ensure API security.
- Filtering to prevent SQL injection attacks.
ICT Teacher
Mercury Private School- Developed lesson plans using varied teaching methods.
- Improved student learning outcomes.