Looking for a job

Aakarsh Mishra

@aakarshmishra1

Security researcher and penetration tester who disclosed vulnerabilities to 40+ organizations, including NASA, NCIIPC, and Samsung.

India

Message

What I'm looking for

I’m seeking a full-time offensive security role after graduation.

I’ve responsibly disclosed security flaws to 40+ organizations, including NASA, NCIIPC (Government of India), CERT-EU, Samsung, and Electronic Arts. NASA sent me a Letter of Appreciation for vulnerabilities affecting its infrastructure.

As a Penetration Testing Intern at Hacktify Cyber Security, I tested lab environments simulating web applications and network infrastructure, identified OWASP Top 10 vulnerabilities, and documented findings with reproduction steps and remediation guidance. At Vulncure Ltd., I assessed web applications and documented client-side and server-side security findings.

I’m completing a B.Tech in Cybersecurity & Data Science at Lakshmi Narain College of Technology, Bhopal. My certifications include Certified AppSec Practitioner (CAP), Certified Network Security Practitioner (CNSP), and Junior Penetration Tester, and I’m seeking a full-time offensive security role after graduation.

Experience

Work history, roles, and key accomplishments

Penetration Testing Intern

Hacktify Cyber Security

Feb 2025 - Mar 2025 (1 month)

Conducted hands-on penetration testing against lab environments simulating real-world web applications and network infrastructure. Identified and documented OWASP Top 10 vulnerabilities including XSS, SQL Injection, CSRF, IDOR, and Broken Authentication with clear reproduction steps and remediation guidance.

Penetration Testing Web Application Security OWASP Top 10 XSS SQL Injection CSRF IDOR Broken Authentication API Security Burp suite Vulnerability Assessment

Penetration Testing Intern

Vulncure Ltd

Nov 2024 - Dec 2024 (1 month)

Performed web application security assessments using Burp Suite for request interception, manipulation, and fuzzing across multiple target applications. Tested for client-side and server-side vulnerabilities including XSS, SQL Injection, and security misconfigurations, and analysed end-to-end attack flows.

Web Application Security Burp suite XSS SQL Injection Security Misconfiguration Fuzz Testing Vulnerability Assessment

Education

Degrees, certifications, and relevant coursework

Lakshmi Narain College of Technology

Bachelor of Technology, Cybersecurity and Data Science

2023 -

Activities and societies: Active in bug bounty research and CTF competitions alongside coursework.

Pursuing a Bachelor of Technology in Cybersecurity and Data Science, with coursework focused on web application security, network security, and vulnerability assessment.