Currently hunting adversaries @ ExpressVPN

Security Engineer · Threat Hunter · DFIR

Aung Myint Myat

I build the tools and systems that are the backbone of security operations.

I spend most of my time building security tooling, writing detections, and hunting things that don't want to be found. I like making stuff that is actually useful when you are dealing with real threats, mostly around detection engineering, DFIR, and automation across AWS, GCP, and Azure.

Get in touch →

aungmm@soc:~$ whoami

Based in Singapore

What I do

~/security-engineering

Security Engineering

Building the tools and systems that everything else runs on: detection pipelines, response tooling, and the platforms that power the whole security operation.

~/threat-hunting

Threat Hunting

Proactive hunts across global infrastructure to surface sophisticated adversaries that evade automated detection.

~/dfir

Incident Response & DFIR

Investigation, containment, eradication, and digital forensics when a breach is unfolding.

~/automation

Security Automation & AI Roadmap

Architecting and building SOC's AI roadmap, automated AI assisted mechanims, for tier1 incident response, periodic threat hunting, data pipelines development, and threat feed collection and enrichment

Experience

ExpressVPN

2 yrs 6 mos

Senior Threat Hunter / Analyst

Jan 2026 to Present

›Lead threat hunting operations across global infrastructure
›Build and deploy detection systems that catch sophisticated adversaries
›Automate detection-logic deployment and vulnerability management
›Run security architecture reviews for engineering teams

Threat HuntingSIEMDetection EngineeringSecurity ArchitectureVulnerability ManagementAutomation

Threat Hunter / Analyst II

Feb 2024 to Dec 2025

›Ran proactive threat hunts across global infrastructure
›Built detection content and tuned SIEM alerting to catch evasive adversaries
›Automated detection-logic deployment and vulnerability management workflows

Threat HuntingSIEMDetection EngineeringVulnerability ManagementAutomation

Sysnet System & Solutions

1 yr 5 mos

Cyber Security Officer

Oct 2022 to Feb 2024

›Deployed SIEM, vulnerability scanners, and endpoint protection for full threat visibility
›Ran security assessments and compliance audits for regulated clients
›Worked directly with clients to solve complex security challenges

SIEMVulnerability ManagementSecurity AuditsProject ManagementNetwork Hardening

Kernellix Co. Ltd