> about

Zay Pai Htet

Experienced Penetration Tester skilled in identifying and mitigating security vulnerabilities across various IT environments. Proficient with industry-standard tools and manual testing techniques, focused on strengthening organisational security through thorough assessments and practical remediation.

emailzaypaihtet@gmail.com
githubgithub.com/zaypaihtet2
based in Myanmar

> work experience

Python Lecturer & Full-Stack Developer

NiT College

Apr 2025 — Jun 11 2026

  • Developed ERP, HR, Attendance and POS software.
  • Teaching Python and full-stack development.

Full-Stack Developer

HEXT

May 2026 - Present · Myanmar (Burma)

  • Design and develop full-stack web applications and business systems, including CRM, LMS, ERP, HR, Attendance, POS, and custom enterprise solutions.
  • Develop and maintain RESTful APIs, backend services, databases, and responsive frontend applications.
  • Conduct security assessments and penetration testing on web applications and APIs to identify potential vulnerabilities.
  • Test and mitigate common web security risks, including SQL Injection, XSS, authentication and authorization issues, insecure API endpoints, and access-control vulnerabilities.
  • Perform API security testing, vulnerability assessment, and security hardening before production deployment.
  • Manage application deployment and production environments on cloud servers and VPS infrastructure.
  • Configure and maintain Linux servers, web servers, databases, domains, DNS, SSL/TLS certificates, firewalls, and production environments.
  • Implement and maintain CI/CD pipelines for automated building, testing, and deployment.
  • Monitor production systems, analyze logs, troubleshoot incidents, and perform performance and security improvements.
  • Work across the complete software development lifecycle, including system architecture, database design, development, QA, security testing, deployment, monitoring, and maintenance.

Software Tester

Global Wave Technology

Apr 2024 — Apr 2025 · Thingangyun

  • Testing API and UI issues.
  • Pen testing to ensure API security.
  • Filtering to prevent SQL injection attacks.
  • Automation testing.

Quality Assurance (QA Software Tester)

Shopdoora

Nov 2023 — Apr 2024 · Ahlone

  • Developed comprehensive test cases.
  • Conducted User Acceptance Testing.
  • Pen testing to ensure API security.
  • Filtering to prevent SQL injection attacks.

ICT Teacher

Mercury Private School

Apr 2023 — Dec 2024 · Yangon

  • Developed lesson plans using varied teaching methods.
  • Improved student learning outcomes.

> education & certifications

Diploma in CCS

Feb 2021 — Mar 2022

Passed with Honors

MCPA Information Technology Passport Examination

Apr 2023 — Oct 2023 · Yangon

Passed with Honors

> skills

Technical

Python
Linux
Node.js
MySQL
PHP
Bash
AI Integration
Prompt Engineering
Automation
System Design
UI/UX Design
DevOps

Security

Cybersecurity
Penetration Testing
API Security
SQL Injection Prevention

QA

Automation Testing
Manual Testing

Soft skills

Good Communication