> about
Zay Pai Htet
Experienced Penetration Tester skilled in identifying and mitigating security vulnerabilities across various IT environments. Proficient with industry-standard tools and manual testing techniques, focused on strengthening organisational security through thorough assessments and practical remediation.
> work experience
Python Lecturer & Full-Stack Developer
NiT College- Developed ERP, HR, Attendance and POS software.
- Teaching Python and full-stack development.
Full-Stack Developer
HEXT- Design and develop full-stack web applications and business systems, including CRM, LMS, ERP, HR, Attendance, POS, and custom enterprise solutions.
- Develop and maintain RESTful APIs, backend services, databases, and responsive frontend applications.
- Conduct security assessments and penetration testing on web applications and APIs to identify potential vulnerabilities.
- Test and mitigate common web security risks, including SQL Injection, XSS, authentication and authorization issues, insecure API endpoints, and access-control vulnerabilities.
- Perform API security testing, vulnerability assessment, and security hardening before production deployment.
- Manage application deployment and production environments on cloud servers and VPS infrastructure.
- Configure and maintain Linux servers, web servers, databases, domains, DNS, SSL/TLS certificates, firewalls, and production environments.
- Implement and maintain CI/CD pipelines for automated building, testing, and deployment.
- Monitor production systems, analyze logs, troubleshoot incidents, and perform performance and security improvements.
- Work across the complete software development lifecycle, including system architecture, database design, development, QA, security testing, deployment, monitoring, and maintenance.
Software Tester
Global Wave Technology- Testing API and UI issues.
- Pen testing to ensure API security.
- Filtering to prevent SQL injection attacks.
- Automation testing.
Quality Assurance (QA Software Tester)
Shopdoora- Developed comprehensive test cases.
- Conducted User Acceptance Testing.
- Pen testing to ensure API security.
- Filtering to prevent SQL injection attacks.
ICT Teacher
Mercury Private School- Developed lesson plans using varied teaching methods.
- Improved student learning outcomes.
> education & certifications
Diploma in CCS
Passed with HonorsMCPA Information Technology Passport Examination
Passed with Honors> skills
Technical
Python
★★★★★
Linux
★★★★★
Node.js
★★★★★
MySQL
★★★★★
PHP
★★★★★
Bash
★★★★★
AI Integration
★★★★★
Prompt Engineering
★★★★★
Automation
★★★★★
System Design
★★★★★
UI/UX Design
★★★★★
DevOps
★★★★★
Security
Cybersecurity
★★★★★
Penetration Testing
★★★★★
API Security
★★★★★
SQL Injection Prevention
★★★★★
QA
Automation Testing
★★★★★
Manual Testing
★★★★★
Soft skills
Good Communication
★★★★★