/about
The story behind the transition.
// whoami
Pyae Sone Win
With over 9 years of professional experience as a Solution Architect and Full-Stack Developer in FinTech, I've built e-commerce platforms, custom CMS implementations, robust APIs, and mobile applications across retail and education sectors.
Now I'm channeling that deep understanding of how software is built into learning how it breaks. My developer background gives me a unique edge in penetration testing — I understand the architecture, the frameworks, and the common shortcuts developers take.
Actively building hands-on experience through TryHackMe, PortSwigger Web Security Academy, HTB Web Penetration Tester modules, and live bug bounty programs.
// timeline
2024–Present
Offensive Security Transition
Hands-on offensive security training across TryHackMe, PortSwigger Academy, HTB Web Pentester modules, and live bug bounty programs including Luno, Bitso, and Under Armour.
Nov 2024 – Nov 2025
Full Stack Engineer — Evolution Payment Group (Thailand)
Integrated payment wallets and banking systems with EDC devices. Built acquirer file processing, payout calculations, and payment reconciliation systems.
Jan 2021 – Oct 2024
Solution Architect (Promoted) — Wave Money
Designed enterprise architecture for fintech platforms — KYC systems, biller integrations, payment services. Built scalable CMS on AWS EKS with Kubernetes. Led biller management portal and real-time transaction APIs.
May 2018 – Jan 2021
Freelance Full Stack Developer
Delivered solutions for ConceptX (Lead Dev), Prudential (agent onboarding & payment), Resdi (PWA startup), and Bindez (social media listening with Facebook Graph API). Laravel, Vue, Nuxt, Next.js, Firebase.
Sep 2017 – Jul 2018
Full Stack Developer — Softhatch
Pogo Seat ticketing platform — chatbot booking with DialogFlow, ticket sync with third-party systems. 1Echo employee engagement dashboard in React.js.
Jul 2015 – Oct 2017
Junior Full Stack Developer — New Westminster Institute
CV management platform for 15-member team. Migrated CodeIgniter → Laravel 5.3. Built real-time chat feature with Android, Ajax, jQuery, REST.
Achievements
Competitions & Community
ACM ICPC Rank 10th in Asia (2017) · Angel Hack Hackathon 1st Runner Up (2018) · Phandeeyar Startup Challenge Winner (2019) · B.C.Sc Computer Science, UCSY
// tryhackme
Chaos Reigns★ 0.1%
Mr. Robot★ 3.4%
Advent of Cyber 2025★ 4.6%
OhSINT★ 5.5%
Shield Apprentice★ 5.7%
First Alert Closed★ 6.7%
Sword Apprentice★ 6.8%
Cyber Ready★ 7.9%
OWASP Top 10★ 9.9%
Metasploitable10.1%
Pentesting Principles10.5%
30 Day Streak10.9%
Blue11.5%
Networking Nerd19.1%
World Wide Web22.5%
7 Day Streak22.6%
Webbed25.4%
cat linux.txt31.7%
3 Day Streak34.7%// skills
Offensive Security
Network Penetration TestingWeb Application SecurityActive Directory AttacksPrivilege Escalation (Win/Linux)SQL Injection & XSSAPI Security TestingBug Bounty Hunting
Development Background
PHP / LaravelJavaScript / TypeScriptReact.js / Vue.js / Node.jsREST & GraphQL APIsAWS (Production Deployments)MySQL / MongoDBDocker / Git / CI/CD
Tools
Burp SuiteNmap / MasscanMetasploit FrameworkBloodHound / CertipyWiresharkJohn / HashcatGobuster / ffuf
Platforms
HackTheBoxTryHackMeOSCP / PEN-200Kali Linux
// numbers
9+
Years in Dev
127
THM Rooms
3
Bug Bounty Programs
14
Challenge Boxes