Looking for a job

Deepanshu Deswal

@deepanshudeswal

Penetration tester conducting Bugcrowd security research and building tools like UploadHunter to detect file upload vulnerabilities.

India

Message

What I'm looking for

I'm seeking opportunities to apply my practical web security skills in real-world penetration testing and application security environments.

Through Independent Security Research, I conduct reconnaissance, attack-surface mapping, and vulnerability testing on in-scope Bugcrowd programs. I've completed 210+ practical labs on PortSwigger Web Security Academy and built UploadHunter, a Python-based scanner for file upload vulnerabilities.

At Thiranex, I conducted web application vulnerability assessments and black-box penetration testing, then delivered VAPT reports with CVSS-scored findings, proof-of-concept documentation, and remediation recommendations. I also developed WebRecon, an automated reconnaissance framework, and I'm seeking opportunities to apply my practical web security skills in real-world penetration testing and application security environments.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester

Current

Independent Security Research

Jan 2025 - Present (1 year 8 months)

Completed 210+ hands-on security labs on PortSwigger Web Security Academy covering major web vulnerability classes. Conducting structured reconnaissance, attack-surface mapping, and vulnerability testing on in-scope Bugcrowd programs.

Burp suite OWASP XSS SQLI CSRF IDOR XXE SSRF Authentication Bypass Business Logic Flaws Python BASH UploadHunter WebRecon Subfinder Amass Dnsx Httpx Katana LinkFinder SecretFinder Arjun

Cybersecurity Intern

Thiranex

May 2026 - Jun 2026 (1 month)

Conducted Web Application Vulnerability Assessments using Burp Suite and OWASP Top 10 methodology, identifying XSS, SQLi, CSRF, and authentication flaws. Executed black-box penetration testing for IDOR, file upload bypass, session management vulnerabilities, and access control flaws.

Burp suite OWASP Top 10 XSS SQLI CSRF IDOR File Upload Bypass Session Management Access Control Python Nmap Subdomain Enumeration JS Endpoint Extraction VAPT Reporting CVSS

Education

Degrees, certifications, and relevant coursework

NIMS University

Bachelor of Technology, Computer Science and Engineering

2024 -

Pursuing a Bachelor of Technology with relevant coursework in network security, computer networks, operating systems, Linux administration, Python programming, and data structures.

PortSwigger Web Security Academy

Web Application Security, Web Application Security

2025 -

Completed 210+ hands-on security labs covering major web vulnerability classes including XSS, SQLi, CSRF, IDOR, XXE, SSRF, authentication bypass, and business logic flaws.