Open to opportunities

Danish Abbas

@danishabbas1

Message

I uncover web vulnerabilities and build threat detection workflows across offensive and defensive security engagements.

Pakistan

Message

What I'm looking for

I'm seeking a Penetration Tester or SOC Analyst role where I can apply web security testing, vulnerability research, SIEM monitoring, alert triage, and incident response skills across offensive and defensive security engagements.

I've discovered and responsibly disclosed high-severity IDOR, XSS, SQL Injection, and authentication bypass vulnerabilities through YesWeHack and Bugcrowd. My web application testing combines manual Burp Suite assessment, attack-surface mapping, fuzzing, and Python-powered reconnaissance automation.

I've also built a Wazuh SIEM threat detection lab across Linux and Windows endpoints, tuning rules for brute force, privilege escalation, file integrity, and suspicious process activity. I bring hands-on experience in vulnerability reporting, CVSS scoring, OWASP-aligned remediation, incident triage, and secure full-stack development with PHP Laravel, MySQL, and JavaScript.

Experience

Work history, roles, and key accomplishments

Current

Independent Security Researcher

Current

Self Employed

Jul 2024 - Present (2 years 1 month)

Discovered and responsibly disclosed high-severity vulnerabilities in production web applications, including IDOR, XSS, SQL Injection, and Authentication Bypass. Authored CVSS v3.1-scored reports with PoC reproduction and remediation guidance.

Penetration Testing Burp suite Python Nmap OWASP Top 10 CVSS Vulnerability Assessment