Thanarak
Kanyaprasit

Cybersecurity / Penetration Testing / Product Security
Scroll to play
CHAPTER 02
portfolio
01 — Who
TRAINED ATWORK AT
CHIANG MAIITSC
UNIVERSITYCMU
CurrentlyCybersecurity—runningWeb Pentestengagements·and building customThreat Inteltooling
Interlude — 00:06 / 00:18

Start with the basics.

Good security work starts with careful observation, clear notes, and understanding how the system actually behaves.
02 — Focus

What I'm working on now.

Web application penetration testing, threat intelligence, and custom tooling — currently studying AI security.

Focus01 / 05

Web Pentest

Empty chair, low light
Focus02 / 05

AI Security

Single flower, close crop
Focus03 / 05

Threat Intel

Mountain ridge with bird
Focus04 / 05

Field Notes

Bird in flight
Focus05 / 05

Custom Tooling

Flower with bird
02 — Reading list01/06
No. 01Web hacking · methodology

Bug Bounty Bootcamp

The Guide to Finding and Reporting Web Vulnerabilities

— Field library —256 — 612 pp.
Interlude — 00:12 / 00:18

Learn, test, improve.

Each lab, challenge, and write-up adds a little more clarity to how systems break and how they can be made safer.
03 — Experience
Experience across
building and securing software.
001
Cyber Security Engineer ITSC, Chiang Mai University
Cooperative education at the IT Service Center: conduct web application penetration testing, build threat-intelligence software for security monitoring and analysis, and report vulnerabilities while supporting remediation with the security team.
2026 · ITSC / CMU
002
AI Engineer & System Architect SmartMath
Designed a service-oriented AI learning platform with separate student and admin interfaces, authenticated API orchestration, streamed RAG tutoring, durable background quiz generation, and purpose-specific data stores.
2025 · SmartMath
04 — Project reviews
Systems I built,
and the decisions behind them.

Selected systems, explained through what I built and the technical decisions behind it.
simplified system flowscan ▸ 000%
Project 01 — 2025

SmartMath

AI Engineer · System Architect · AI-powered math learning platform

Built RAG chat, ingestion, and async quiz generation.

Web Apps · APIStreamed RAGDurable JobsPrivate Storage

Built core learning flows for an AI-powered math platform: streamed RAG chat, document ingestion and indexing, and background quiz generation. I designed the API boundaries and data flow between the web apps, backend, and AI services.

  1. 01
    Built the retrieval pathRAG design

    Implemented hybrid retrieval and reranking so chat and quiz generation use relevant course material.

  2. 02
    Designed the API boundaryaccess design

    Added session-aware access controls between the web apps, backend, and internal AI services.

  3. 03
    Built durable quiz jobsasync workflow

    Moved long-running quiz generation into an outbox-backed queue with worker processing and status updates.

  4. 04
    Built the ingestion pipelineinput boundary

    Added authenticated uploads, file validation, document processing, and retrieval indexing.

village-security.app/dashboardscan ▸ 000%
Project 02 — 2025

Village Security Platform

Scrum Master · Full-Stack Developer · University course project · team delivery

Ran sprints and helped ship visitor, guard, and real-time notification flows.

Next.jsBun · ElysiaWebSocketRBAC

Scrum Master on a team project for community operations. I planned sprints, coordinated delivery across the frontend, backend, and real-time notifications, and contributed to visitor and guard workflows.

  1. 01
    Planned the delivery cadenceScrum Master

    Turned the course scope into smaller deliverable slices and kept the team focused on the next working increment.

  2. 02
    Kept priorities visibleproduct delivery

    Aligned work around resident approval, visitor check-in and check-out, and guard workflows for the first usable release.

  3. 03
    Coordinated cross-team handoffsteam facilitation

    Connected frontend, backend, and real-time notification work so dependent features could be tested together.

  4. 04
    Contributed to core flowsimplementation

    Built and refined visitor-facing screens and supported the notification and dashboard integration work.
05 — Contact

Open to product security work.

Open to Product Security, Application Security, and Penetration Testing roles in Bangkok, Chiang Mai, or remote. Focused on securing applications across the development lifecycle — from secure design and development through testing and remediation.

thanarak_ka@cmu.ac.th↗ linkedin / thanarak-kanyaprasit↗ github / Thanarak-q↗