About
Cybersecurity professional with 1+ year of hands-on penetration testing at a product-based SaaS company and 2+ years of freelance bug bounty research across 70+ organizations including SANS, SAP, and Intuiface. Surfaced 80+ vulnerabilities that automated scanners missed, working across web applications, Android mobile, APIs, and network infrastructure. Looking to bring offensive security expertise to a team where finding what others overlook is the mission.
Skills & Expertise (31)
Work Experience
Cybersecurity Expert
Contractor+
Apr 2025 - Present
Conducted black-box and grey-box web application & API penetration tests (static + dynamic analysis) on internal products, identifying 30+ critical and 50+ medium/high severity vulnerabilities. Discovered authentication bypasses, logic flaws, and weaknesses in the key derivation function that automated scanners (DAST/SAST) failed to flag. Performed VAPT on internal network IPs, including infrastructure mapping, firewall analysis, and protocol-level exploitation. Delivered detailed, executive-ready vulnerability assessment reports with severity ratings, reproduction steps, and prioritized remediation roadmaps. Validated all findings end-to-end, from proof-of-concept exploit to confirmed patch - minimizing false-positive noise for the engineering team.
Freelance Cybersecurity Researcher
Independent
Jan 2023 - Jan 2025
Identified and responsibly disclosed vulnerabilities across 70+ organizations via bug bounty and VDP programs. Earned Hall of Fame recognition at SANS Institute, SAP, and Intuiface for impactful security contributions. Specialized in OWASP Top-10, IDOR, authentication flaws, injection attacks, and business-logic abuse across web & mobile apps. Self-directed: end-to-end ownership from recon and exploitation through developer-friendly disclosure write-ups.
Education
B.E. Computer Engineering
2021 - 2023 · Afghanistan
Diploma in Computer Engineering
2018 - 2020 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (31)
Click a skill to find developers with the same skill
