Looking for a job

Subhadeep Karmakar

@subhadeepkarmakar

I uncover web and infrastructure vulnerabilities through penetration testing, bug bounty research, and SOC investigation workflows.

India

Message

What I'm looking for

I'm looking for hands-on cybersecurity work where I can investigate alerts, test web and infrastructure security, document actionable findings, and grow further in penetration testing and SOC incident-response workflows.

I've conducted vulnerability research across HackerOne, Intigriti, and Bugcrowd, testing web, mobile, API, and cloud environments for vulnerabilities including XSS, IDOR, SQLi, SSRF, CSRF, and privilege escalation.

My work combines structured reconnaissance, asset enumeration, exploitation, and CVSS-scored reporting with proof-of-concept evidence, business-impact analysis, and remediation guidance. I build Bash and Python scripts to automate reconnaissance, asset discovery, and fuzzing workflows.

During internships with Deltaware Solutions and Redynox, I performed vulnerability scanning, basic exploitation, SOC log monitoring, alert triage, network-traffic analysis, web security testing, and system-hardening support.

As a freelance security researcher, I've investigated 50+ simulated security alerts and assessed 10+ hosts and web applications. I'm a CEH v12-certified practitioner continuing to strengthen my penetration testing and SOC capabilities through hands-on research, CTFs, and security communities.

Experience

Work history, roles, and key accomplishments

Current

Security Researcher

Current

HackerOne

Jul 2024 - Present (2 years 2 months)

Conducts manual and automated penetration testing across web applications, APIs, cloud platforms, and mobile environments. Submits detailed, CVSS-scored vulnerability reports with proof-of-concept and remediation guidance.

Penetration Testing Vulnerability Research Burp suite Nmap Subfinder Amass Python BASH OWASP Top 10 CVSS

Current

Security Researcher

Current

Intigriti

May 2023 - Present (3 years 4 months)

Performs manual and automated security testing on web, mobile, and API-based applications, identifying OWASP Top 10 vulnerabilities and business logic flaws. Participates in Live Hacking Events and CTFs.

Burp suite OWASP ZAP Interactsh Fuzz Testing Exploitation Proof of Concept Development Web Security API Security

Current

Security Researcher

Current

Bugcrowd

May 2022 - Present (4 years 4 months)

Conducts security assessments and penetration testing on web, mobile, and API applications in line with OWASP Top 10 and industry standards. Collaborates with security triage teams to ensure accurate vulnerability prioritization.

Penetration Testing Vulnerability Assessment OWASP Top 10 Report Writing Collaboration Vulnerability Research

Current

Freelance Security Researcher

Current

Self Employed

Investigated 50+ security alerts and events across lab and simulation environments, including phishing, malware, brute-force, and suspicious authentication scenarios. Conducted vulnerability assessments on 10+ hosts and web applications using Nessus and OpenVAS.

Incident Response IOC Validation Log Correlation Nessus OpenVas SSL TLS Nmap Vulnerability Assessment

Penetration Testing Intern

Deltaware Solutions

Jun 2025 - Aug 2025 (2 months)

Performed vulnerability scans and basic exploitation using Burp Suite, Nmap, and Metasploit across assigned target environments. Prepared technical reports with detailed findings and remediation steps.

Burp suite Nmap Metasploit Vulnerability Scanning Reconnaissance Technical Writer

Cybersecurity Intern

Redynox

Jun 2025 - Jul 2025 (1 month)

Assisted in SOC operations including log monitoring, alert triage, and basic threat detection. Analyzed network traffic using Wireshark and performed web vulnerability scanning using OWASP ZAP.

SOC Operations Log Monitoring Alert Triage Wireshark OWASP ZAP Vulnerability Scanning System Hardening