
Nikhil Mahala
@nikhilmahala
Security researcher at HackerOne and Bugcrowd with paid P3 findings and a Rank 31 leaderboard placement.
What I'm looking for
At HackerOne and Bugcrowd, I discovered and responsibly disclosed IDOR, CSRF, and Broken Access Control vulnerabilities, including a confirmed P3 IDOR that earned a bounty. My submissions earned me Rank 31 on a HackerOne program leaderboard.
I built PyLogAlert, a Python log analysis engine with stateful event correlation and YAML-based detection rules. I’m OSCP+ certified and have solved 150+ machines across Hack The Box and Offensive Security Proving Grounds.
Experience
Work history, roles, and key accomplishments
Independent Security Researcher
HackerOne & Bugcrowd
Jan 2026 - Present (8 months)
Discovered and responsibly disclosed vulnerabilities including IDOR, CSRF, and Broken Access Control, with several validated as P3-severity findings. Achieved Rank 31 on a HackerOne program leaderboard.
Education
Degrees, certifications, and relevant coursework
Indian Institute of Information Technology Design and Manufacturing
Bachelor of Technology, Mechanical Engineering
2023 -
Grade: 7.9 CGPA
Pursuing a Bachelor of Technology in Mechanical Engineering with a CGPA of 7.9, expected to graduate in July 2027.
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Salary expectations
Social media
Interested in hiring Nikhil?
You can contact Nikhil and 90k+ other talented remote workers on Himalayas.
Message NikhilGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
