Looking for a job

ye thu

@yethu

Cyber Security Consultant at RV Connex (Cynclair), running red team exercises and threat hunts across cloud and on-premise environments.

Myanmar

Message

At RV Connex (Cynclair), I designed and executed realistic attack simulations, including red team exercises and phishing campaigns to fine-tune detection rules. I also delivered threat hunting and threat intelligence across multi-cloud and on-premise environments using MITRE ATT&CK TTPs.

At ATOM Myanmar, I led third-party security assessments that identified and mitigated over 15 critical vulnerabilities. I also reviewed application security and advised on security for new projects.

At Yoma Bank, I developed security architecture and best practices for web, mobile, and network platforms. I partnered with development teams on secure-by-design practices for online and mobile banking applications.

Earlier at Yoma Bank, I performed web, mobile, API, and network penetration testing and integrated SAST, SCA, and DAST tools into the DevSecOps CI/CD pipeline. I hold OSCP, CRTP, eMAPT, MCTRA, CRT, CPSA, Foundation of Purple Teaming, and ISO/IEC 27001 Information Security Associate certifications.

Experience

Work history, roles, and key accomplishments

Cyber Security Consultant

RV Connex (Cynclair)

Nov 2024 - Aug 2026 (1 year 9 months)

Designed and executed realistic attack simulations, including red team exercises and phishing campaigns. Conducted vulnerability assessments and penetration testing, delivering comprehensive reports with actionable remediation guidance.

Red Team Operations Penetration Testing Vulnerability Assessment Threat Hunting Threat Intelligence MITRE ATT&CK Security Architecture MDR Cloud Security Endpoint Security

Cyber Security Expert (Assistant Manager)

ATOM Myanmar

Sep 2023 - Oct 2024 (1 year 1 month)

Led third-party security assessments for vendor and internal platforms, identifying and mitigating over 15 critical vulnerabilities. Conducted vulnerability assessments and application security reviews, and developed security awareness training programs.

Vulnerability Assessment Application Security Security Awareness Risk Assessment Compliance Technical Reporting

Senior Security Specialist

Yoma Bank

Oct 2021 - Aug 2023 (1 year 10 months)

Developed security architecture and best practices for web, mobile, and network platforms. Led red team exercises, including phishing simulations and IoT testing, and coordinated incident response efforts.

Security Architecture Red Team Phishing Simulations IoT Security Incident Response Threat Modeling Security By Design Regulatory Compliance

Security Specialist (Pentester)

Yoma Bank

Oct 2019 - Sep 2021 (1 year 11 months)

Performed penetration testing on web, mobile, API, and network systems using Burp Suite, Nessus, and Metasploit. Integrated SAST, SCA, and DAST tools into the DevSecOps CI/CD pipeline.