
John
Security Researcher
Competenze

Consulta i miei servizi

Esperienza lavorativa
Freelance Security Researcher & Penetration Tester
Independent / Freelance • Freelance
Dec 2021 - Present • 4 yrs 5 mos
I work as an independent security researcher, focusing on finding real, exploitable vulnerabilities in web applications, APIs, cloud setups, and mobile platforms. Most of my work comes from bug bounty programs and private security assessments for early-stage startups and growing SaaS products. My approach is heavily manual. I spend time understanding how an application actually works, then look for logic flaws, access control issues, authentication weaknesses, IDORs, injection points, and misconfigurations that automated scanners usually miss. I also test how smaller issues can be chained together to create serious impact. For every finding, I provide clear proof of concept, explain the real-world risk in simple terms, and share practical remediation steps that developers can actually implement. The goal is not to generate long reports, but to help teams fix the problems that attackers would realistically exploit.