Open to opportunities

Caleb Cudjoe Mensah User

@calebcudjoemensahuse

Message

I’m a cybersecurity student focused on web/API penetration testing and vulnerability automation.

Ghana

Message

What I'm looking for

I’m looking for an entry-level role where I can perform web/API penetration testing, contribute to responsible disclosure, and keep improving my automated security tooling—while learning from experienced security professionals to grow toward a global cybersecurity career.

I’m a cybersecurity student specializing in web application and API penetration testing, with hands-on experience in vulnerability assessment, bug bounty research, and security tooling development in Python. I actively contribute to responsible disclosure programs on HackerOne and Bugcrowd while building automated security tools.

I’ve developed a Python-based VAPT Automation Tool that automates reconnaissance and initial scanning, including subdomain enumeration, directory discovery, and CVE checking, plus custom WAF detection and structured reporting. Through a Cybersecurity Mentorship Program, I supported supervised VAPT engagements, used Nmap and Kali Linux tooling for controlled security scans, and worked through the full VAPT reporting cycle from scoping to remediation guidance—while pursuing CompTIA Security+ and eJPT to grow into a global cybersecurity career.

Experience

Work history, roles, and key accomplishments

Current

VAPT Automation Tool

Current

Personal Project

Jan 2024 - Present (2 years 5 months)

Developed a Python security tool to automate reconnaissance and initial scanning, significantly reducing manual recon time. Implemented subdomain enumeration, directory discovery, CVE checking, custom WAF detection, and structured vulnerability reporting.

Python Security Tools Subdomain Enumeration Directory Discovery WAF Vulnerability Reports Logging

Current

Independent Security Research

Current

Responsible Disclosure

Jan 2024 - Present (2 years 5 months)

Performed manual web and API security testing within permitted HackerOne and Bugcrowd scopes and documented findings. Reported vulnerabilities such as IDOR (BOLA), broken access control, and XSS with reproduction steps, impact analysis, and remediation guidance.

Responsible Disclosure IDOR BOLA XSS Burp suite Postman Vulnerability Reproduction Risk Assessment

Cybersecurity Mentorship Program

Personal/Program Experience

Jan 2023 - Jan 2024 (1 year)

Assisted with supervised vulnerability assessments and penetration testing engagements for client systems. Supported scoping-to-reporting delivery by running controlled Nmap-based scans with Kali Linux and contributing to technical reports and remediation strategies.

Vulnerability Assessment Penetration Testing Nmap Kali Linux Scoping Remediation Strategies

Education

Degrees, certifications, and relevant coursework

Kumasi Technical University

Bachelor of Technology, Computer Technology

2024 -

Pursuing a Bachelor of Technology in Computer Technology at Kumasi Technical University (Jan 2024–expected 2027). Coursework includes Network Security, Systems Administration, and Programming Fundamentals, alongside self-study in offensive security and penetration testing methodology.