Open to opportunities

Miloslav Palik

@miloslavpalik

Message

Red Team operator and penetration tester specializing in offensive and defensive security.

Serbia

Message

What I'm looking for

I seek roles where I can lead offensive security engagements, mentor teams, improve detection and response, and drive measurable security posture improvements in collaborative, mature security programs.

I am a Red Team operator and penetration tester focused on offensive and defensive cybersecurity, delivering thorough adversary emulation and vulnerability discovery.

I design and execute tailored adversary emulation campaigns, penetration tests, and social engineering exercises aligned with frameworks like MITRE ATT&CK and the Cyber Kill Chain, producing clear, actionable insights for executives.

My hands-on experience spans deep exploit development, web and cloud pentesting, Active Directory assessments, digital forensics, malware analysis, and SIEM/SOAR rule development to improve detection and response.

I mentor teams, build playbooks and KPIs, contribute to vulnerability management and incident response, and continuously elevate organizational security posture through practical testing and operational guidance.

Experience

Work history, roles, and key accomplishments

Current

Freelance Security Researcher

Current

HackerOne

Mar 2025 - Present (8 months)

Conduct freelance security research and bug bounty hunting, identifying and responsibly disclosing critical vulnerabilities (SSTI, RCE, SQLi, SSRF) and contributing to improved security posture for clients. Perform advanced exploit development and reverse engineering, bypassing defenses and documenting findings.

Bug Bounty Exploit Development Reverse Engineering Burp suite RCE

Red Team Operations Advisor

Oktacron

Dec 2024 - Mar 2025 (3 months)

Advised on red team operations and cybersecurity analysis, conducted penetration testing and malware analysis, and developed SIEM detection rules and incident response guidance to reduce adversary dwell time. Delivered detailed attack reports and remediation recommendations.

Red Team Penetration Testing Malware Analysis SIEM Incident Response Threat Detection Vulnerability Management Log Analysis

Penetration Tester

PentestWizzard

Sep 2023 - Dec 2024 (1 year 3 months)

Performed authorized simulated attacks across networks, web, mobile, APIs and physical controls, producing actionable vulnerability reports and collaborating with teams to validate fixes and improve defenses. Supported red teaming and developed custom testing tools and scripts.

Penetration Testing APIs Mobile Security Burp suite Report Writing Exploit Development

Independent Bug Bounty Hunter

Self-Employed

Oct 2022 - Sep 2023 (11 months)

Hunted vulnerabilities across public programs (HackerOne, Bugcrowd), finding XSS, IDOR, open redirects and misconfigurations through manual testing and tooling, and contributing to program security through responsible disclosure.

Bug Bounty Recon Burp suite Parameter Tampering Google Dorks

Web Developer & Penetration Tester

Self-Employed

Jul 2021 - Sep 2022 (1 year 2 months)

Delivered web development and security services including e-commerce and catalog sites, implemented fixes for XSS/IDOR and other vulnerabilities, and conducted SDLC-aligned vulnerability management and incident reporting. Improved site SEO and UX for clients.