Looking for a job

Maimo Harris

@maimoharris

Lead VAPT Engineer at Cyenetic Solutions LTD, where I uncovered a critical authorization flaw that prompted a client-wide security review.

Cameroon

Message

What I'm looking for

I’m open to remote work and relocation.

At Cyenetic Solutions LTD, I lead VAPT delivery for enterprise clients, from engagement scoping and testing through client reporting. I uncovered a critical Broken Access Control flaw in privileged endpoints, prompting a client-wide review and mandatory authorization testing.

At Skye8, I tested API, web, and mobile targets and led authorized red team engagements. I used BloodHound to uncover a privilege-escalation path to Domain Admin that remediation closed and a later retest confirmed.

At IZZY Tech, I conducted vulnerability assessments and penetration tests, including finding a critical IDOR in an invoicing API that exposed customer financial data and personal information. The issue was fixed within five days, and expanded checks caught two more authorization issues before release.

As a part-time bug bounty researcher, I’ve disclosed critical vulnerabilities across more than 100 programs. I also built Reac2Shell, a proof-of-concept exploit and scanner, and founded HR-Tech, where I independently built DocConvert and DevSecKit.

Experience

Work history, roles, and key accomplishments

Current

Lead VAPT Engineer

Current

Cyenetic Solutions LTD

Apr 2026 - Present (7 months)

Lead VAPT delivery for enterprise clients, owning engagement scoping, testing execution, and client reporting. Mentor a team of 5 penetration testers and manage overlapping client testing schedules through Agile-based sprint planning.

Burp suite Nmap Metasploit OWASP Web Security Testing Guide PTES Agile VAPT Black Box Testing Grey Box Testing Web Application Security API Security Network Security

Current

Bug Bounty Researcher

Current

HackerOne, Bugcrowd, Hackprove

Feb 2020 - Present (6 years 9 months)

Identified and responsibly disclosed critical vulnerabilities across 100+ bug bounty programs, including a Critical BOLA on a private fintech program that was fixed within days and awarded a $1,000 bounty.

Bug Bounty Responsible Disclosure BOLA Web Application Security API Security

Penetration Tester

Skye8

Aug 2024 - Feb 2026 (1 year 6 months)

Executed 200+ black-box, gray-box, and white-box tests across API, web, and mobile targets. Led red team operations and authored technical write-ups and executive-level reports.

Burp suite OWASP ZAP Sqlmap Postman OWASP ASVS OWASP API Security Top 10 MITRE ATT&CK BloodHound CVSS V3.1 Scoring NIST SP 800 115 PCI DSS Red Team Malware Development

Penetration Tester

IZZY Tech

Mar 2022 - Jul 2024 (2 years 4 months)

Conducted 150+ vulnerability assessments and penetration tests, finding a Critical IDOR in a client's invoicing API that exposed other customers' financial data and PII.

Vulnerability Assessment Penetration Testing IDOR API Security Web Application Security