M Ayyan Irfan

I’m a cybersecurity engineer with 3 years of experience in web app penetration testing, security audits, and policy design. I bring a strong grasp of industry standards, and I’m skilled in developing impactful exploits that improve real-world security outcomes.

I’ve worked as a Red Teamer with Bugcrowd for almost 2.5 years, where I consistently evaluated application behavior under adversarial conditions. I’ve also contributed through Offensive Security work with YesWeHack and completed an Offensive Security internship at ITSOLERA, strengthening my execution, reporting, and remediation-focused mindset.

In security testing engagements, I’ve identified and validated meaningful vulnerabilities—like a rate-limiting issue, a CSRF vulnerability, and a session identification flaw that could lead to user session invalidation (Session Hijacking). I also found a blind XSS vulnerability reflected in the admin panel (enabling potential admin panel hijacking), and uncovered multiple medium-priority issues including XSS, IDOR, and information disclosure.

I’m dedicated to enhancing security posture and fostering cybersecurity awareness, translating findings into clear, actionable guidance for stakeholders. With my certifications and hands-on experience across real targets, I’m ready to help teams reduce risk and build stronger defenses.