Looking for a job

NITIN MAURYA

@nitinmaurya2

Junior Penetration Tester on HackerOne testing web apps for OWASP Top 10 vulnerabilities, with 150+ TryHackMe rooms completed.

India

Message

What I'm looking for

I’m looking for a Junior Penetration Tester, VAPT Analyst, or Application Security role where I can put my CTF practice to work on production systems.

On HackerOne, I test web applications for OWASP Top 10 vulnerabilities, including XSS, IDOR, authentication bypass, and injection. I apply a methodology developed through 150+ TryHackMe rooms to live, in-scope bug bounty targets.

During four cybersecurity internships, I gained hands-on VAPT experience across web, mobile, network, and Active Directory environments. I’m finishing a BCA in Computer Science and looking to bring my CTF practice to production security work.

Experience

Work history, roles, and key accomplishments

Current

Independent security researcher/ Bug Bounty hunter

Current

HackerOne

Aug 2026 - Present (2 months)

1.Testing web applications on HackerOne for OWASP Top 10 vulnerabilities: XSS, IDOR, authentication bypass, injection.
2.Applying methodology built from 150+ TryHackMe rooms to live, in-scope bug bounty targets.

Current

CTF PLAYER

Current

TryHackMe

Jun 2025 - Present (1 year 4 months)

1. Cleared 150+ TryHackMe rooms across web exploitation, privilege escalation, and network security.
2.Simulated real attack and defense scenarios using Nmap, Burp Suite, and the Linux command line.
3.Went from guided labs to independent challenges while building a working grasp of the OWASP Top 10.

CYBER security intern

CyberWarLab

Mar 2026 - Apr 2026 (1 month)

1.Tested web, mobile, network, and Active Directory environments for vulnerabilities, with senior mentors reviewing the work.
2.Joined scheduled CTF events and live security challenges as part of the mentorship program.
3.Kept to CyberWarLab's security and confidentiality standards throughout.

Cyber security

Redynox

Feb 2026 - Feb 2026 (0 months)

1.Documented common network threats to build a working knowledge base for the team.
2.Helped identify and analyze vulnerabilities in test environments as part of a foundational security review.

Ethical Hacker

Internship Studio

Jul 2025 - Nov 2025 (4 months)

1.Built practical Python tools, including a password strength checker and a keylogger.
2.Developed an SSH file-sharing Android app and a DNS spoofing tool to explore attacks at the network layer.
3.Picked up hands-on experience with Linux, Nmap, and Burp Suite along the way.