Description

Web Application Penetration Tester & Bug Bounty Hunter with 4+ years of experience identifying critical vulnerabilities (ATO, IDOR, Blind XSS). Skilled in Burp Suite, OWASP ZAP, SQLmap, and manual testing. Delivered security improvements for multiple international clients through freelance and contract engagements.

Industry field of expertise

Languages

English
Native or bilingual

Workplace preferences

Remote only

Primarily works remotely

Make Opinion GmbH
Web Application Penetration Tester
CONSULTING AND AUDITS
October 2024 - January 2025 (3 months)
○ Identified and reported multiple high and medium severity vulnerabilities across three testing phases, including Account Takeover, Insecure Direct Object References (IDOR), and Blind XSS, directly impacting user data and platform security. ○ Delivered concise vulnerability reports with clear fixes, improving application security.
Penetration Testing Risk and Vulnerability Assessment OWASP
Euroinnova Business School, S.L.
Security Analyst
September 2023 - November 2023 (2 months)
○ Conducted a comprehensive security analysis and contract-based penetration testing project for EUROINNOVA BS services. ○ Executed a "Black Box Pen Test" to uncover security vulnerabilities in EUROINNOVA BS websites without prior system information. ○ Identified and reported multiple vulnerabilities, contributing to the overall improvement of security measures.
Fotografen Online Service GmbH
Penetration Tester
August 2022 - October 2022 (2 months)
○ Conducted an extensive contract-based penetration testing engagement for Fotografen Online Service GmbH. ○ Reported security vulnerabilities and recommended mitigation strategies to improve system resilience