Available for new projects

I build software, then break it before attackers do.

$

I'm Ny Fong — a penetration tester and full-stack developer. I ship reliable products and break them before attackers can, blending clean engineering with an offensive-security mindset.

Download CV
About

Engineering meets an offensive mindset.

I work across the whole stack — from React and Next.js front-ends to FastAPI and Spring Boot back-ends — and I care about the details that make software fast, accessible and secure.

Currently a Penetration Tester, QA and Software Developer at the General Secretariat for the National Social Protection Council, where I focus on application security, software quality and reliable delivery.

0+
Years experience
0+
Projects shipped
0+
Technologies
What I do

Services & capabilities

From secure back-ends to polished interfaces — and the testing that keeps them trustworthy.

01

Penetration Testing

Black-box & white-box VAPT to find and fix vulnerabilities before attackers do.

Burp SuiteKali LinuxNmapSqlmap
02

Full-Stack Development

End-to-end web apps built with React, Next.js, FastAPI and Spring Boot.

Next.jsReact.jsFastAPISpring Boot
03

Security Research

SAST/DAST tooling, OSINT and AI-assisted testing pipelines for deeper coverage.

TrivyOSINTShodanMaltego
04

Frontend Engineering

Accessible, responsive interfaces with React, Next.js, Tailwind and shadcn/ui.

React.jsTailwindCSSshadcn/uiFigma
05

Backend & APIs

Reliable APIs and services with FastAPI, Spring Boot and PostgreSQL.

FastAPISpring BootPostgreSQLDocker
06

QA & Load Testing

Automated tests, k6 / Locust load testing and SonarQube quality gates.

SonarQubek6LocustPostman
Experience

Selected work & roles

Where I've shipped, secured and tested real systems — most recent first.

  1. Jan 2026 – Present · 7 mos

    NowFull-time03

    Penetration Tester, QA & Software Developer

    General Secretariat for the National Social Protection Council

    Full-time role focused on application security, software quality and reliable system development.

    • Code analysis and static / dynamic security scanning
    • Unit testing and test automation
    • Stress testing and load testing
    • VAPT — Vulnerability Assessment & Penetration Testing
    • Cyber governance and ISO compliance
    Burp SuiteSonarQubeTrivyk6Kali LinuxPostman

  2. Aug 2025 – Dec 2025 · 5 mos

    Full-time02

    Backend Developer

    AI-Powered Penetration Testing Tool

    Cyber-security project: an AI-assisted penetration-testing tool built on black-box and white-box concepts, integrated with a SAST engine.

    • SAST — Static Application Security Testing
    • DAST — Dynamic Application Security Testing
    • Backend APIs in Python FastAPI
    • Nginx, Keycloak, Grafana, Prometheus and SonarQube
    • Sysadmin on Ubuntu Server — Dockerisation and containerisation
    FastAPINginxKeycloakGrafanaPrometheusSonarQubeDockerUbuntu

  3. Jan 2025 – Jul 2025 · 7 mos

    01

    Frontend Web Developer

    ZenTrio — Teamwork Management Platform

    ZenTrio is an all-in-one teamwork management platform built to streamline collaboration, project tracking and productivity. It tackles real-world problems like disorganised workflows, unclear task ownership and the inefficiency of juggling multiple tools.

    • Integrated Google Docs, Slides and Sheets using the Spring framework
    • Drove day-to-day collaboration with Git and GitHub
    • Deployed on Google Cloud Platform and AWS EC2
    React.jsSpring BootGitGitHubGoogle CloudAWS EC2
Recognition

Awards & achievements

Certified Web Red Team Analyst (WEB-RTA)

2026

CyberWarfare Labs

Verify

Certified Cybersecurity Foundations (CORE)

2026

Hackviser

Verify

Top Team Award

2025

Korea Software HRD Center · 13th Basic Course

Coding Challenge — 3rd Prize

2025

Korea Software HRD Center · Basic Course

Cyber Arena & National Cybersecurity Competition

2026

Ministry of Post and Telecommunications

Verify
Toolbox

Tech stack

Languages

JavaJavaScriptTypeScriptPythonC++PHP

Frontend

React.jsNext.jsTailwindCSSshadcn/uiNextUIHTML5CSSFigma

Backend

Spring BootFastAPIPostgreSQL

Cybersecurity

Burp SuiteMaltegoBettercapKali LinuxSqlmapNmapNetcatShodanTrivyOSINTPwntoolsCryptographySIEMForensicsAttack ChainingQualys

AI & LLM

OllamaQwenClaudeCursorAI AgentsMCP ServersRAG

QA & Testing

SonarQubek6LocustPostmanSwagger

DevOps & Tools

GitGitHubDockerNginxKeycloakGrafanaUbuntu
Contact

Let's build something secure together.

Open to new opportunities and collaborations. The fastest way to reach me is email — I usually reply within a day.

litongfong12@gmail.comView resume

Send a message

Opens a pre-filled draft in your own mail app — nothing is sent from this site.

Ny Fong.

© 2026 Ny Fong — all rights reserved.

Built with Next.js & Tailwind