Thapanarath Khempetch

Penetration Tester | Application & Mobile Security | Offensive Security

Available in 1 monthPathum Thani, Thailand6.0 years

About

Penetration tester with 6 years testing web, mobile, API, and ATM systems for enterprise and banking clients. OSCP and eWPTX certified, with 14 published CVEs from open-source vulnerability research.

Experience

Cybersecurity Consultant - Penetration Tester
SOSECURE Co., Ltd.
2020-03 — 2023-01
• Discovered and responsibly disclosed vulnerabilities in open-source software, earning CVE assignments from MITRE. • Conducted penetration testing on web, mobile, backend, and network/infrastructure systems for enterprise and financial-sector clients, delivering detailed reports with prioritized, practical remediation. • Built a hands-on vulnerability lab used for internal training and external security workshops. • Guided junior consultants on penetration-testing approach and tooling.
Senior Associate - Penetration Tester
MAYASEVEN Co., Ltd.
2023-02 — 2026-02
• Delivered penetration tests across web and mobile applications (iOS/Android), backend APIs, ATM systems, and the NDID platform for enterprise clients in the financial sector. • Authored penetration-test reports with risk-ranked findings and prioritized remediation for each client. • Presented findings to both engineering teams and management stakeholders, translating technical risk into business impact and remediation priorities. • Guided client teams through remediation by clarifying technical details and recommending fixes.
Security Engineer
Big Data Institute (BDI)
2026-03 — Present
• Built a Python tool using the Claude API that automatically extracts vulnerability data from security advisories into a central tracker, streamlining manual advisory triage. • Monitor security advisories and lead cross-team follow-up meetings, driving remediation and working with management to decide closure. • Review and revise security checklists and hardening baseline standards. • Coordinate preparation for an upcoming third-party penetration testing engagement.

Education

Kasetsart University
Bachelor of Computer Engineering · Computer Engineering
2011-01 — 2016-01

Skills

api penetration testingburp suitecode & sastcybersecurityethical hacking workshopfridaghidramobile application security testing (ios/android)network & infrastructure security testingnmapopenvaspostmanpython

Role preferences

Open to roles: Penetration Tester, Offensive Security Engineer, Cybersecurity Engineer, DevSecOps

Interested in this candidate? Contact the GetLinks Recruitment team.