IT Security Engineer (Pentester)
Snoopbees Co., Ltd.
Incoming 2026
Offer accepted August 2026. Joining the security team for penetration testing and application security work.
PORTFOLIO
Hein Htet Zaw
Penetration Testing · Security Research · Backend, DevOps & Cloud
Incoming penetration tester at Snoopbees. I co-authored a deep reinforcement learning agent that discovers SQL injection and XSS on its own — accepted for publication at InCIT 2026 — and I build offline-first learning platforms that run with no server.
Published research
SQLi & XSS agent — InCIT 2026
Role
Pentester — Snoopbees (incoming)
Degree
B.Sc. Digital Innovation — First Class
Bangkok, Thailand · ICT (UTC+7) · Incoming IT Security Engineer (Pentester) at Snoopbees · open to research collaboration

About
I graduated from Rangsit University with a Bachelor of Science (Digital Innovation), First Class Honors, and I am joining Snoopbees as an IT Security Engineer (Pentester). My main focus is cybersecurity, AI, backend development, DevOps, and automation.
I enjoy solving technical problems, but I also work well with people. I can explain ideas clearly, support team delivery, and build products that both technical and non-technical people can understand.
Role fit
Experience
A quick view of my technical background, communication skills, and the way I work with teams.
Technical Expertise
Soft Skills
Languages
Snoopbees Co., Ltd.
Incoming 2026
Offer accepted August 2026. Joining the security team for penetration testing and application security work.
Thonburi Bamrungmuang Hospital
2025
Completed a 300-hour internship building internal LINE Official Account workflows and dashboard support for healthcare marketing teams.
Rangsit University
2023 - 2026
Graduated with First Class Honors, 126 credits completed (cumulative GPA 3.79), officially conferred by Rangsit University in May 2026. Focused on cybersecurity, AI, DevOps, software delivery, and product development.
Tokyo Soteria (NPO)
Feb 2021 - May 2023
Part-time role in a social-enterprise food operation, working alongside staff and members with disabilities in a fully Japanese-language workplace.
Picturesque Myanmar Tourism
2018 - 2021
Full-time role, 8 hours daily on a 9-to-5 shift, handling data entry, records management, and administrative operations for a Myanmar-based tourism company.
Gusto International College
2016 - 2018
Built a strong base in IT systems, software practice, and technical communication.
Projects
Selected work that shows how I solve real problems with technical skills in security, AI, delivery, and clear thinking.
Co-authored research accepted at InCIT 2026 (Nov 12–14, Bangkok), designing and training a D3QN agent for autonomous SQLi and XSS discovery in a custom test environment.
Modeled the penetration-testing workflow as a Markov Decision Process with phase-based learning, from reconnaissance through exploitation.
A full cybersecurity curriculum from Linux and networking basics to advanced red team operations, cloud security, and malware analysis — all in one static web app.
306 chapters with guided paths for web security, network pentesting, Active Directory, cloud, bug bounty, and blue team work.
Three self-contained study platforms — IT certification prep, Japanese from hiragana through JLPT N1 (with an IT Japanese track), and beginner digital literacy — each a single HTML file with full-text search, progress tracking, and bookmarks.
Built for classrooms and learners with unreliable internet: no install, no backend, state persisted locally. Content compiled with AI assistance; the platform, search index, and offline architecture are my own.
Internal healthcare tools for message scheduling, campaign work, and simple reporting support.
Delivered system architecture diagrams, workflow documentation, and flowcharts covering message scheduling cycles, campaign operations, and reporting pipelines for the healthcare marketing team.
A point-of-sale and ordering backend hosted on AWS Cloud, with focus on order flow across ordering, kitchen, and delivery stages.
Designed with clear system boundaries and a strong focus on reliability from the beginning.
A static Next.js portfolio built for GitHub Pages with attention to accessibility, stable deployment, and clean maintenance.
Improved deployment stability and reduced maintenance problems with better workflow checks.
Evidence
Where I am most useful on a security or engineering team.
Based in
Bangkok, Thailand
Timezone
ICT (UTC+7)
Currently
Incoming IT Security Engineer (Pentester) at Snoopbees · open to research collaboration
Evidence
AWS Certified Cloud Practitioner (CLF-C02) Specialization
Coursera
Completed
Bachelor's Degree Certificate of Completion (English)
Rangsit University
Completed
Official Academic Transcript
Rangsit University
Completed
Bachelor's Degree Certificate of Completion (Thai)
Rangsit University
Completed
EnglishScore Core Skills (CEFR B2)
British Council
Verified
Cyber Security 101
TryHackMe
Completed
Leadership & Community
A compact view of event leadership work that shows coordination, teamwork, logistics support, and calm execution in large student settings.
Rangsit University
2026 Apr 7
Rangsit University
Helped organize a university-wide student event by supporting team coordination, logistics, scheduling, and on-site operations.

RSUnival DIT Thingyan
Team Coordination

RSUnival DIT Thingyan
Event Operations

RSUnival DIT Thingyan
Organizer Team
Rangsit University
2024 Apr 5
Bangkok, Thailand
Helped organize and coordinate Rangsit University’s Thingyan Festival across multiple years, supporting volunteer coordination, event logistics, activity planning, and on-site execution.

RSU Thingyan
Cultural Activities

RSU Thingyan
Volunteer Support

RSU Thingyan
Stage / Crowd Moment

RSU Thingyan
Behind the Scenes
Contact
I'm starting at Snoopbees as a penetration tester. I'm always glad to talk about offensive-security research, reinforcement learning applied to security testing, or the InCIT 2026 paper — and I read every message sent here.
Use email for role discussions, and use the shared documents if you want a quicker overview of my background.
This opens your email app with your message drafted to me.
Prefer direct contact? Email me and I will reply as soon as I can.