Pornpitcha Poonsap

• Focused on Red Team, Penetration Testing, and Vulnerability Assessment (VA)
• Certified in CEH, with experience in VA, PoC development, and pentest reporting
• Skilled in Frontend & UX/UI, plus strong communication and project management
• Multilingual: Thai, English, Japanese (JLPT N2), Chinese (HSK4)
• Career Goal: To become a Red Team and VA professional, contributing to offensive security and strengthening organizational defenses.

HTML

CSS

JavaScript 

Python

Sql

Django

React

Bootstrap

Tailwind CSS

Certified Ethical Hacker (CEH v12)

Academic Project – Digital Record Tracking System

• Designed and developed a system for document receiving, issuing, and searching to improve efficiency in the Computer Science Department.
• Created Use Case, Class, and Sequence Diagrams, along with UI Prototypes to simulate real-world system design.
• Focused on solving issues of delays, errors, missing records, and excessive paper usage.
• Applied risk analysis, quality assurance, and testing to validate functionality and system reliability.

Academic Project – IT Project Management: Attendance & Leave System

• Acted as Project Manager, leading a team to design a digital HR system for attendance and leave management.
• Conducted stakeholder analysis, project charter, requirements breakdown, and WBS.
• Managed project timeline using Gantt Chart and Critical Path Method (CPM).
• Prepared budget estimation, quality assurance (RAM analysis), and risk management plan.
• Delivered a complete project proposal aligned with organizational strategy.

Information Control & Approval System

• Developed a web-based document management system using Python (Django), SQLite, HTML/CSS, JavaScript, Bootstrap.
• Implemented RBAC (Role-Based Access Control), Audit Trail, and multi-level approval workflow to ensure Confidentiality, Integrity, and Availability (CIA).
• Designed UI/UX prototypes with Figma and diagrams with Draw.io following Agile methodology.
• Delivered a functional system supporting online document storage, approvals, and security controls.