
Nico Albanese
@nicoalbanese
Security researcher in Bugcrowd and HackerOne programs who developed open-source pentesting tools and automated reconnaissance pipelines.
What I'm looking for
In Bugcrowd and HackerOne programs, I had a finding accepted as valid in TheFork's program for PII exposure via a GraphQL query, and received a bounty recognized by PayPal's Checkout campaign.
I developed Phantom Brain, an open-source offline pentesting framework that uses local AI to analyze WiFi, NFC, Sub-GHz, and RFID captures. It includes a Flask REST API, SQLite persistence, and a typed tool architecture.
I also developed Bounty Hunter Pipeline, an automated reconnaissance pipeline that chains security tools and uses Ollama to prioritize results. Its testing infrastructure includes a Raspberry Pi 4B, Tailscale, Kali Linux, and systemd-managed VPN rotation.
My infrastructure automation project runs services 24/7 on a Raspberry Pi 4, with network failover, monitoring, and automated backups. I also work as a Clinical Neurophysiology Technician at Hospital Argerich, CEMIC and other centers, analyzing neurological tracings and operating precision equipment.
Experience
Work history, roles, and key accomplishments
Bug Bounty Hunter
Bugcrowd & HackerOne
Jan 2025 - Present (1 year 9 months)
Found and reported security vulnerabilities in bug bounty programs, including a valid PII exposure via GraphQL query in TheFork's program and recognition from PayPal's Checkout campaign. Maintained rigorous OpSec and used a core stack of security tools.
Developed a modular offline pentesting framework with local AI (Ollama) for analyzing WiFi, NFC, Sub-GHz, and RFID captures. Implemented typed contract architecture, automatic classifier, Flask REST API, and SQLite persistence.
Developer — Bounty Hunter Pipeline
Bounty Hunter Pipeline
Jan 2025 - Present (1 year 9 months)
Built an automated reconnaissance pipeline chaining subfinder, httpx, nuclei, dalfox, and BypassNinja with Ollama-powered result prioritization. Set up testing infrastructure with Raspberry Pi, Tailscale, Kali Linux, and systemd-managed VPN rotation.
Infrastructure Automation (Personal Project)
Personal Project
Jan 2024 - Present (2 years 9 months)
Operated a Raspberry Pi 4 running 24/7 with systemd-managed services including Telegram bots, VPN rotation, network watchdog, and automated backups. Implemented automatic failover, private VPN network, and full system recovery after a critical kernel failure.
Clinical Neurophysiology Technician
Hospital Argerich, CEMIC and other centers
Jan 2006 - Present (20 years 9 months)
Analyzed neurological tracings from over 500 patients, detecting anomaly patterns in large, noisy datasets. Operated precision equipment (EEG, PSG, ECG) with zero-error protocols in critical environments.
Education
Degrees, certifications, and relevant coursework
Ekoparty Hackademy
Secure CI/CD: DevSecOps Best Practices, DevSecOps
2025 - 2025
Completed Secure CI/CD: DevSecOps Best Practices certification from Ekoparty in 2025.
Ekoparty
WiFi Cracking / Network Spying, Network Security
2025 - 2025
Completed WiFi Cracking / Network Spying certification from Ekoparty in 2025.
HackerX
Certification, Cybersecurity
2025 - 2025
Completed a certification from HackerX in 2025.
Availability
Location
Authorized to work in
Portfolio
github.com/OttoyRocky/phantom-brainSalary expectations
Social media
Job categories
Interested in hiring Nico?
You can contact Nico and 90k+ other talented remote workers on Himalayas.
Message NicoGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
