Linn Maung Email & Phone Number

Bangkok, TH

Bangkok, Bangkok City, Thailand

Yangon, Myanmar

• I was promoted to a broad role covering both red team and some blue team tasks. Prevented from company's financial loss and reputational damage by reporting multiple critical/high severity security vulnerabilities not.
• Committed/accountable for all of the offensive security activities, including web application, mobile application, API and infrastructure security testing results of offensive security team.
• Conducting manual security assessment for 40+ web applications including APIs and android apps.
• Conducting application security incident handling between internal IT teams and SOC monitoring team.
• Performing post incident activities including vulnerability assessment, process improvement, system hardening and reporting to higher management, etc.
• Identifying and analyzing security threats aka external cyber threat hunting across the organization and provide security recommendations to prevent apocalypse.

Yangon, Myanmar

• After responsibly disclosed over 20 million users' personal identifiable information (PII) confidential data leakage vulnerability to company, I became a youngest member of SOC (offensive security team) at Myanmar’s.
• Conducting vulnerability assessment and penetration testing for infrastructure, web, mobile applications and APIs, not only by using multiple different security assessment tools (Burp Suite Pro, Burp Suite Enterprise.
• Vulnerability verification for detected vulnerabilities by automated testing and generating PoC by using manual assessment result.
• System design analysis and threat modelling for newly created applications and change requests to provide recommendations for secure design.
• Discuss with multiple stakeholders (system owners, vendors and development team) across the organization for identified vulnerabilities and provide solution recommendations to fix them.
• Finding security weakness points in public-facing business systems via open-source intelligence (OSINT) methods and report to system owner.

Yangon, Myanmar

• After completing my Bsc (Hons) degree and certified ethical hacker (CEH) certificate, I joined internship program at Kernellix which is systems integrator (SI) company.
• Analysing attack vectors for web/mobile applications.
• Creating automation scripts using Python and Bash.
• Writing reports on security vulnerabilities.
• Conducting Exposure Analysis and Research on Myanmar's Cyber Space by passively collecting the web application technologies, server versions, defacement history, usage of vulnerable CMS versions, etc. of.gov.mm.

Bsc (Hons), Computing

Activities and Societies: Student Representative

Higher National Diploma, Computing And System Development, Merit

Activities and Societies: EC/Student Representative, Event Planner