~/burn1ngsphere
OPERATOR ID RTP-CITC
Pawee Werawithayaset

Pawee Werawithayaset

ภาวีร์ วีรวิทยาเศรษฐ์
> BurN1nGSPheRE
Police Captain — Deputy Inspector
Computer Systems Management Division
Central Information Technology Center
Office of Information and Communication Technology
Royal Thai Police
CITC-CSIRT CTF: YARMTUK DFIR Registered PE Bangkok, Thailand
6+Years in security operations
20Industry certifications
99.95%Production uptime maintained
9National competitions entered
01 — SERVICE RECORD

Operations Log

Career progression at the Royal Thai Police

  1. DEC 2023 — PRESENT
    Police Captain · Systems Administrator
    Computer Systems Management Division / Central Information Technology Center
    • Lead systems administrator for critical IT infrastructure — servers, network appliances and virtualisation — holding 99.95% uptime across production systems.
    • SOC analyst, Tier 1 and 2. Continuous monitoring of Splunk, QRadar, ELK and FortiSIEM for real-time detection and triage.
    • Led digital forensics and incident response engagements: root-cause analysis, evidence acquisition with Autopsy, Volatility, FTK and Wireshark, and post-incident reporting to executives.
    • Ran penetration tests and vulnerability assessments against internal systems, web applications and APIs, producing both technical and C-suite remediation reports.
    • Built cybersecurity policy and IR plans meeting Thailand's Cybersecurity Act B.E. 2562 obligations for critical information infrastructure.
    • Supervised red-team and purple-team exercises mapped to MITRE ATT&CK, coordinating with NCSA and government CSIRT partners.
  2. DEC 2020 — NOV 2023
    Police Lieutenant · Systems Administrator
    Computer Systems Management Division / Central Information Technology Center
    • Ran IT infrastructure operations and network-security monitoring as a Tier 1 SOC analyst.
    • Supported incident-response procedures, digital forensics and log analysis.
    • Took part in national cyber exercises and NCSA training programmes.
  3. APR 2020 — NOV 2020
    Police Sub-Lieutenant · Systems Administrator
    Computer Systems Management Division / Central Information Technology Center
    • Started in IT infrastructure operations and network-security monitoring as a Tier 1 SOC analyst.
02 — DOMAINS

Capability Matrix

Working areas and the tooling behind them

Offensive Security

Penetration testing across web, network and Active Directory; red teaming and adversary simulation mapped to MITRE ATT&CK. Metasploit, Burp Suite, SQLMap, Gobuster, Nmap, Nessus.

Defensive Operations

SOC Tier 1 and 2, SIEM work on Splunk, QRadar, ELK and FortiSIEM, threat hunting, log analysis and dark-web monitoring.

Digital Forensics & IR

DFIR with Autopsy, Volatility, FTK and Wireshark. Root-cause analysis and post-incident reporting for executive audiences.

Cloud & API Security

AWS, Fortinet Cloud NGFW, CNAPP, IAM, OWASP API Top 10 and hands-on API penetration testing.

Infrastructure & Network

VMware, Active Directory, Linux and Windows Server, Palo Alto NGFW, FortiGate and VPN.

Scripting & Automation

Python, Bash and PowerShell, used to automate security tooling and repetitive analysis work.

Compliance & Standards

Cybersecurity Act B.E. 2562 (CII scope), ISO/IEC 27001 as Lead Auditor and Implementer, PDPA, ISO 9001 and ISO 20000.

Threat Intelligence

CTI frameworks and OSINT, arcX Foundation CTI Analyst, AttackIQ breach-and-attack simulation, MITRE ATT&CK.

03 — CREDENTIALS

Certifications

OSCP+ — OffSec Certified Professional+ OSCP+
OffSec Certified Professional+
Offensive Security
OSCP — OffSec Certified Professional OSCP
OffSec Certified Professional
Offensive Security
CPTS — Certified Penetration Testing Specialist CPTS
Certified Penetration Testing Specialist
Hack The Box
eCPPT — Certified Professional Penetration Tester eCPPT
Certified Professional Penetration Tester
INE Security
CRT-ID — Certified Red Team - Infrastructure Development CRT-ID
Certified Red Team — Infrastructure Development
CyberWarFare Labs
CRTA — Certified Red Team Analyst CRTA
Certified Red Team Analyst
CyberWarFare Labs
eJPT — Certified Junior Penetration Tester eJPT
Certified Junior Penetration Tester
INE Security
CEH — Certified Ethical Hacker CEH
Certified Ethical Hacker
EC-Council
PenTest+ — CompTIA PenTest+ PenTest+
CompTIA PenTest+
CompTIA
CNSP — Certified Network Security Practitioner CNSP
Certified Network Security Practitioner
The SecOps Group
PT1 — Jr Penetration Tester PT1
Jr Penetration Tester
TryHackMe
CHFI — Computer Hacking Forensic Investigator CHFI
Computer Hacking Forensic Investigator
EC-Council
CySA+ — CompTIA CySA+ CySA+
CompTIA CySA+
CompTIA
Security+ — CompTIA Security+ Security+
CompTIA Security+
CompTIA
SAL1 — Security Analyst Level 1 SAL1
Security Analyst Level 1
TryHackMe
CC — Certified in Cybersecurity CC
Certified in Cybersecurity
ISC2
FCA — Fortinet Certified Associate - Cybersecurity FCA
Fortinet Certified Associate — Cybersecurity
Fortinet
FCF — Fortinet Certified Fundamentals - Cybersecurity FCF
Fortinet Certified Fundamentals — Cybersecurity
Fortinet
ICCA — Certified Cloud Associate ICCA
Certified Cloud Associate
INE Security
COE — Professional Competency, Computer Engineering COE
Professional Competency, Computer Engineering
Council of Engineers Thailand

Issue and expiry details are verifiable on Credly and LinkedIn.

04 — TRACK RECORD

Competitions

National CTF and cyber-exercise results

  • 1st NCSA & Fortinet CNAPP Capture the Flag
    National Cyber Security Agency and Fortinet · 2025
  • 2nd Royal Thai Police Cybersecurity Competition
    Royal Thai Police · 2024
  • 3rd Cyber Range Thailand
    National Cyber Security Agency · 2024
  • 3rd Royal Thai Police Cybersecurity Competition
    Royal Thai Police · 2022
  • 10th Hack The Scammer CTF
    National Cyber Security Agency · 2025
  • 10th NCSA Thailand Cyber Top Talent
    National Cyber Security Agency · 2025
  • 15th RTARF Cyber Warrior Contest
    Royal Thai Armed Forces · 2025
  • — NCSA Thailand Cyber Top Talent
    National Cyber Security Agency · competitor, 2024
  • — NCSA Thailand Cyber Top Talent
    National Cyber Security Agency · competitor, 2023
05 — EDUCATION

Academic & Research

Degrees, professional licence and published work

Master of Engineering — Computer Engineering
Mahidol University, Faculty of Engineering
2014 — 2019 · NAKHON PATHOM
Research focus: machine learning applied to financial time-series forecasting.
Bachelor of Engineering — Computer Engineering
Mahidol University, Faculty of Engineering
2010 — 2014 · NAKHON PATHOM
Registered Professional Engineer
Council of Engineers Thailand — CpE.2-014
CERTIFICATE OF ENGINEERING PROFESSIONAL COMPETENCY
Licensed practitioner in computer engineering under the Council of Engineers Thailand.
Stock Closing Price Prediction Using Machine Learning
Werawithayaset, P. (2020) · IEEE
17TH ICT&KE · PP. 1–6
DOI 10.1109/ICTKE47035.2019.8966836
06 — CONTACT

Direct Access

Channels and public profiles

LinkedIn
pawee-werawithayaset GitHub
github.com/BurN1nGSPheRE Verified badges
credly.com/users/pawee-werawithayaset Official email
[email protected] Personal email
[email protected] Back to top
scroll to top