Cybersecurity Analyst & Bug Hunter — Independent Researcher (HackerOne) (2023–Present)
Performed web application security testing and vulnerability validation on public bug bounty platforms, focusing on authentication, authorization, and application security. Documented findings by preparing proof-of-concept demonstrations and writing detailed vulnerability reports to support responsible disclosure. Covered common web vulnerabilities including XSS, SQL Injection, CSRF, IDOR, and security misconfiguration issues.• Conducted security reconnaissance and manual testing against modern web applications.• Identified and assessed access control and authentication/authorization weaknesses.• Produced remediation recommendations aligned with reported vulnerabilities.• Participated in ethical disclosure workflows and achieved top rankings in bug bounty programs.