Experience

Meritz Securities

Offensive Security Engineer

  • Perform red team exercises, penetration tests, and security reviews across the company’s web, application, and mobile services.
  • Strengthen network and endpoint defenses by translating emerging threats and offensive findings into effective security controls.
  • Research real-world zero-day vulnerabilities and develop practical detection and mitigation techniques.

2026 -

KITRI Best of Best

14th Security Consulting Track

  • Developed expertise in designing and evaluating end-to-end information security processes across diverse environments.

2025

Vulnerability Reports

  • An unauthenticated debug endpoint in Dgraph Alpha exposes the full process command line, including the configured admin token.

Bug Bounty

  • Temu

    Missing Authorization

    HackerOne CertifiedPublic

    20266.5 Medium$4,000+
  • Bilt Technologies

    Private Program

    HackerOne CertifiedPrivate

    2026High$2,900+
  • Nintendo Server Bug Bounty Program

    Private Program

    HackerOne CertifiedPrivate

    2026High$800+
  • PayPal

    Open Redirect

    HackerOne CertifiedPublic

    20263.4 Low$800
  • Snapchat

    Improper Access Control

    HackerOne CertifiedPublic

    20266.1 Medium$750
  • Automattic

    Improper Access Control

    HackerOne CertifiedPublic

    20267.5 High$400
  • EXNESS

    Information Disclosure

    HackerOne CertifiedPublic

    20260.1–3.9 Low$300
  • Spotify

    Improper Access Control

    HackerOne CertifiedPublic

    20266.8 Medium$200
  • EXNESS

    Open Redirect

    HackerOne CertifiedPublic

    2026Low$100
  • Automattic

    Cross-Site Request Forgery CSRF

    HackerOne CertifiedPublic

    20263.9 Low$100
  • Rank Math SEO

    Missing Authorization

    Wordfence Certified

    20268.1 High$20
  • Rank Math SEO

    Improper Access Control

    Wordfence Certified

    20266.5 Medium$20
  • Rank Math SEO

    Improper Access Control

    Wordfence Certified

    20267.7 High$20

Guestbook

Abusive, defamatory, or threatening messages are prohibited.