Looking for a job

Sangsongthong Chantaranothai

@sangsongthongchantar

Security researcher and penetration tester focused on practical web and network exploitation with clear client-ready reporting.

Thailand

Message

What I'm looking for

I’m looking for a remote security role where I can run hands-on penetration testing, expand SOC detection capabilities, and deliver clear, professional reports—while continuing lab-based learning and working with international teams.

I’m a Security Researcher with hands-on experience conducting penetration testing across simulated Linux and Windows environments. I use tools like Burp Suite, Nmap, Metasploit, Nessus, Bloodhound, Impacket, Netcat, and Wazuh to uncover real weaknesses and translate them into actionable findings.

I also build structured security labs and document the process—finishing PortSwigger Web Security Academy labs (XSS, SQLi, SSRF) and developing a SOC detection lab across Windows/Linux endpoint logs, SIEM detection engineering, and incident response simulation. I’m careful about professional, client-facing reporting, having produced penetration test reports using an industry-standard template.

Before specializing in security, I supported enterprise infrastructure as an IT Support Technician, deploying Moodle on an Ubuntu Server instance, administering Windows 10 endpoints with Active Directory domain join, and handling campus hardware, network, and large-scale conferencing support.

Experience

Work history, roles, and key accomplishments

Current

Security Researcher

Current

Hexterika Cyberlab

Feb 2023 - Present (3 years 2 months)

Conducted penetration testing across simulated Linux and Windows environments and produced client-facing penetration test reports. Built Active Directory pentest and SOC detection lab environments, and completed web security labs covering XSS, SQLi, and SSRF.