
Milan dhiman
@milandhiman
I uncover web vulnerabilities and build practical security and compliance tools.
What I'm looking for
I'm an independent security researcher on HackerOne and Bugcrowd, where I've identified session persistence, application-level DoS, and Host Header Injection issues, including findings affecting Spotify endpoints.
I build practical security tooling, including MiniBurp, a lightweight web vulnerability scanner with request interception, crawling, payload simulation, and HTTP response analysis designed to reduce false positives.
I'm also developing CyLens, an AI-assisted DPDP governance platform for compliance gap analysis, control mapping, risk assessment, remediation recommendations, and reporting. My foundation spans SIEM, threat detection, incident response, cloud security, IAM, network security, and vulnerability management.
Experience
Work history, roles, and key accomplishments
Independent Security Researcher
HackerOne / Bugcrowd
Jan 2024 - Present (2 years 8 months)
Identified session persistence, Application-Level DoS, and Host Header Injection vulnerabilities in web applications. Conducted practical vulnerability testing and documented findings following responsible disclosure practices.
Education
Degrees, certifications, and relevant coursework
Chitkara University
Bachelor of Engineering, Computer Science (Cybersecurity)
2023 -
Pursuing a Bachelor of Engineering in Computer Science with a focus on Cybersecurity, expected to graduate in 2027.
TryHackMe
Hacker Holidays, Cybersecurity
Completed the Hacker Holidays training on TryHackMe in 2026.
Microsoft
Azure Cloud Fundamentals, Cloud
Earned the Azure Cloud Fundamentals certification.
Microsoft
Microsoft Security, Compliance and Identity Fundamentals, Security, Compliance, and Identity
Earned the Microsoft Security, Compliance and Identity Fundamentals certification.
Government of India
ISEA Cyber Hygiene Practitioner, Cyber Hygiene
Certified as an ISEA Cyber Hygiene Practitioner by the Government of India.
Microsoft
Microsoft Sentinel (SIEM) Fundamentals, SIEM
Earned the Microsoft Sentinel (SIEM) Fundamentals certification.
Cisco Networking Academy
Introduction to Cybersecurity, Cybersecurity
Completed the Introduction to Cybersecurity course from Cisco Networking Academy.
Forage
Deloitte Cybersecurity Job Simulation, Cybersecurity
Completed the Deloitte Cybersecurity Job Simulation on Forage.
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Portfolio
hackerone.com/milandhimanSalary expectations
Social media
Job categories
Skills
Interested in hiring Milan?
You can contact Milan and 90k+ other talented remote workers on Himalayas.
Message MilanGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
