Aman

Bug Bounty Hunter

Remote • Fulltime

Jun 2024 - Present • 2 yrs 5 mos

-Conduct independent security research and vulnerability discovery across web applications, APIs, mobile applications, and infrastructure, identifying vulnerabilities including SQL Injection, XSS, RCE, IDOR, authentication/authorization flaws, and business logic vulnerabilities. -Report and validate security vulnerabilities through responsible disclosure programs, providing detailed PoCs, exploitation steps, technical impact, and remediation guidance. -Performed 250+ security findings across web, API, mobile, and infrastructure environments through continuous security research and offensive-security testing.

Cyber Security Analyst

Cynox Security LLP • Fulltime

Mar 2024 - Present • 2 yrs 8 mos

Worked on end-to-end Vulnerability Assessment and Penetration Testing (VAPT) activities across Web Applications, APIs, Android/iOS Mobile Applications, and Network Infrastructure. Collaborated with clients to understand project requirements, define testing scope, discuss testing methodologies, and coordinate security assessments. Performed both static and dynamic security testing, including manual vulnerability assessment and validation. Identified, reproduced, and analyzed security vulnerabilities, assessed their impact and severity, and prepared detailed technical security reports with evidence, risk ratings, and remediation recommendations. Conducted vulnerability review sessions with clients and internal teams, explained technical findings and their business impact, and assisted teams in understanding remediation requirements. Maintained vulnerability tracking and assessment records throughout the testing lifecycle and supported retesting/verification of fixes.