Ibrahim User

I’m a Security Engineer with a strong offensive security background, delivering penetration testing across web app, mobile app, network, API, and participating in red teaming and source code audit work. I embed security into product delivery by implementing Secure SDLC practices and supporting feature-wise secure architecture design and implementation.

In my current role, I conduct and coordinate penetration testing for OTA, e-commerce, courier service, and food delivery systems, and I help teams with remediation and patch implementation. Before that, I led application security efforts—performing API, Web, and Mobile penetration testing—and supported infrastructure R&D across ASOC, ASPM, and RBVM to enhance overall security posture while maintaining PCI DSS v4 compliance.

As a co-founder of PentesterSpace, I built and managed security operations, recruited and trained teams, and onboarded 30+ clients to proactively secure them. I also participated in crowdsource penetration testing and bug bounty programs (e.g., HackerOne, Bugcrowd, Yogosha, Intigriti), combining automation with practical threat modeling and vulnerability disclosure discipline.