Looking for a job

masood rehman

@masoodrehman

Message

I find critical vulnerabilities across Web3, web applications, networks, and Active Directory environments.

Pakistan

Message

What I'm looking for

I'm looking for remote or relocation opportunities where I can conduct penetration testing, assess Web3 and API attack surfaces, develop exploit techniques, and help secure real-world systems.

I conduct penetration tests and smart contract security audits for international clients, identifying critical vulnerabilities in DeFi protocols, web applications, APIs, and decentralised Web3 back-end systems. My work has helped mitigate risks including client funds becoming permanently inaccessible.

I'm an HTB Certified Penetration Testing Specialist (CPTS) with a software engineering background, building my offensive security skills through HackTheBox, CTFs, bug bounty hunting, and independent research.

Experience

Work history, roles, and key accomplishments

Current

Independent Security Researcher

Current

Self-Employed

Jul 2025 - Present (1 year 2 months)

Competing in HackTheBox and CTF challenges to sharpen offensive security and exploit development skills. Conducting independent smart contract security research and bug bounty hunting on Web3 protocols.

Hack The Box CTF Offensive Security Exploit Development Smart Contract Security Bug Bounty Web3 Penetration Testing

Freelance Cybersecurity Consultant & Software Engineer

Self-Employed

Mar 2024 - Jun 2025 (1 year 3 months)

Conducted smart contract security audits and web application penetration tests for clients across the USA and Europe. Identified and reported critical vulnerabilities in DeFi protocols, preventing potential loss of client funds.

Smart Contract Auditing Web Application Penetration Testing (WAPT)DeFi Security Assessments Flutter Dart API Security Secure Coding