About
Certified security researcher (OSCP, CEH) and alumnus of St. Cloud State University (M.S., Engineering Management) with a proven track record of discovering high-impact vulnerabilities across Google, T-Mobile, Swiss national e-voting infrastructure, and cryptocurrency platforms. Expertise spans penetration testing, Web3 / smart contract auditing, and advanced cryptography. Active contributor to YesWeHack, Bugcrowd, and Cantina. Open to relocation worldwide.
Skills & Expertise (22)
Work Experience
Security Researcher
YesWeHack
Jan 2026 - Present
Conduct in-depth security research focused on cryptography, Android internals, and web application security. Identified 8 acknowledged vulnerabilities through Google VRP, including two P2 cryptographic findings and multiple P3 Android component exposures. Responsible disclosure via structured reports escalated directly to vendor security teams.
Security Researcher
Bugcrowd
Jun 2025 - Present
Web application penetration testing across Bugcrowd programs; focus on IDOR, authentication bypass, and access control. Discovered and responsibly disclosed a security vulnerability affecting T-Mobile customers, escalated through Bugcrowd triage.
Smart Contract Auditor
Cantina
Jan 2025 - Present
Smart contract security audits and Web3 vulnerability research — including findings in Swiss national e-voting cryptographic infrastructure. Review Solidity contracts and DeFi application logic for reentrancy, access control, and cryptographic weaknesses. Deliver detailed technical reports with proof-of-concept exploits and remediation guidance.
BPM Developer
Hexaware Technologies
May 2022 - May 2023
Developed and maintained BPM workflows and automation solutions using Java-based frameworks. Contributed to API integration and backend service development; collaborated cross-functionally on enterprise process applications.
Education
M.S. — Engineering / Industrial Management - St. Cloud State University
2023 - 2024 · Afghanistan
B.Tech — Computer Science & Engineering - Dr. B.R. Ambedkar University
2018 - 2022 · Afghanistan
Certifications
Mendix Rapid Developer Certification
Mendix · 2022
Appian Certified Associate Developer
Appian · 2022
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (22)
Click a skill to find developers with the same skill