Skip to main content
Lasha TarkhnishviliLT
Looking for a job

Lasha Tarkhnishvili

@lashatarkhnishvili

Vulnerability Management Engineer at Flutter CEE, operating vulnerability programs and Jira-integrated remediation workflows.

Georgia
Message

At Flutter Central & Eastern Europe, I continued vulnerability management engineering responsibilities following an internal reorganisation, with expanded scope across CEE brand infrastructure.

At Adjarabet.com / aPeople, I engineered and operated the vulnerability management program across CEE infrastructure, covering Tenable scanning, asset lifecycle management, and dynamic tagging.

I designed Jira-integrated workflows for vulnerability and posture issue tracking, monitored remediation SLAs, and coordinated findings with engineering and delivery teams.

Through independent research on HackerOne and Bugcrowd, I assess production web applications and have identified and reported vulnerabilities including XSS, CORS misconfigurations, exposed API endpoints, and secret leakage.

Experience

Work history, roles, and key accomplishments

AA
Current

Junior Vulnerability Management Analyst

Adjarabet.com / aPeople

May 2024 - Present (2 years 5 months)

Engineered and operated the full Vulnerability Management program across CEE infrastructure, including scan configuration, asset lifecycle management, tagging, dynamic mapping, and remediation workflows. Managed authenticated, unauthenticated, compliance, and external exposure scanning within Tenable, and maintained Jira-integrated posture management workflows.

Bugcrowd logoBU
Current

Independent Researcher

Jan 2022 - Present (4 years 9 months)

Conducted web application security assessments against real production targets through public bug bounty programs, including subdomain enumeration, directory fuzzing, secret scanning, API surface mapping, vulnerability exploitation, and written report submission. Independently identified and reported valid vulnerabilities across multiple programs, including XSS, CORS misconfigurations, exposed API

HackerOne logoHA
Current

Independent Researcher

Jan 2022 - Present (4 years 9 months)

Conducted web application security assessments against real production targets through public bug bounty programs, including subdomain enumeration, directory fuzzing, secret scanning, API surface mapping, vulnerability exploitation, and written report submission. Independently identified and reported valid vulnerabilities across multiple programs, including XSS, CORS misconfigurations, exposed API

UL

ICT Specialist (Seasonal)

UEFA Champions League

Jun 2023 - Jul 2023 (1 month)

Provided IT support and ICT operations during UEFA Champions League events in Tbilisi, Georgia.

AH

IT Specialist

Adams Holding

Oct 2017 - Dec 2017 (2 months)

Provided IT support and systems maintenance within holding company operations.

Education

Degrees, certifications, and relevant coursework

Georgian Technical University logoGU

Georgian Technical University

Bachelor, Informatics and Management Systems

2014 - 2018

Pursued a Bachelor's degree in the Faculty of Informatics and Management Systems, focusing on information technology and management.

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan