Penetration Tester

I am a cybersecurity student and aspiring Penetration Tester focused on Web, Mobile, and API security. I am building my career through practical security testing experience in banking, payment, and web application environments.

I have experience in threat modeling, security test case design, manual and automated penetration testing, vulnerability discovery, exploitation, retesting, proof-of-concept development, and security reporting. I am familiar with documenting findings using CWE, CVSS, remediation recommendations, and PoCs.

At VNPAY, I work as a Pentest Intern supporting security assessments for web, mobile, and API systems in the banking and payment domain. I have also contributed to developing a DAST tool for automated security testing.

Previously, I completed a web application penetration testing internship at the Vietnam National Cyber Security Center. There, I practiced Python challenges, built and tested a PHP web application, and used PortSwigger Web Security Academy to strengthen my web security knowledge.

I hold the eWPT Web Application Penetration Tester certification and am pursuing a Bachelor's degree in Cybersecurity at Thuy Loi University. I am motivated to continuously improve my technical penetration testing skills and contribute to application security teams.