Open to opportunities

Ahmed Abdelaziz

@ahmedabdelaziz1

Message

Bug bounty and web application penetration tester focused on finding and fixing critical flaws.

Egypt

Message

What I'm looking for

I’m looking for a security-focused role where I can run manual and automated testing, discover critical web flaws, and work closely with developers to remediate issues—backed by strong reporting standards and real impact.

I’m a Web Application Penetration Tester & Bug Bounty Hunter with 3+ years of experience identifying and mitigating security vulnerabilities. I’m known for uncovering critical issues through both manual and automated security testing.

My work focuses on exposing risks such as XSS, SQL Injection, CSRF, IDOR, and Broken Access Control. I use tools like Burp Suite, OWASP ZAP, and Nmap to investigate applications and validate impact.

I’ve been recognized in multiple Hall of Fame listings for discoveries in platforms including Stanford University, Alibaba, Fifth Third Bank, Swisscom, and others. I investigate and report findings, then collaborate with developers to understand and remediate the issues.

Experience

Work history, roles, and key accomplishments

Current

Bug Bounty Hunter

Current

HackerOne & Budcrowd

Feb 2023 - Present (3 years 3 months)

With 3+ years of web application penetration testing experience, conducted manual and automated security testing on HackerOne and Budcrowd programs, identifying and reporting vulnerabilities such as XSS, SQL Injection, CSRF, IDOR, and broken access control. Delivered notable findings across platforms including Comcast, Just Eat Takeaway, Dell, HBE Aruba, Under Armour, Canva, and collaborated with