Mansi Jain

I’m an application security researcher with 3–4 years of hands-on experience in application penetration testing and vulnerability research. Through active participation in bug bounty programs on HackerOne and Bugcrowd, I’ve built a track record of identifying, exploiting, and documenting web application and API security issues aligned with OWASP Top 10.

I’m proficient in manual exploitation and structured testing workflows, using Burp Suite Pro as my primary interception proxy for both targeted payload crafting and automated scanning. I focus on turning findings into clear, actionable technical insights rather than one-off reports.

On the API side, I perform security assessments using Postman and Fiddler across REST and GraphQL endpoints. I test for business logic flaws, improper authorisation, and data exposure, then map results to the OWASP Top 10 framework to produce proof-of-concept steps, severity ratings, and remediation guidance.

I keep consistent hunting discipline across multiple concurrent programs, handling retesting and program communications professionally. I’m also a Certified Cyber Security Expert (v3.8) and I’m driven by opportunities where I can deliver high-quality security assessments and help teams raise their security baseline.