twisss zss

I am a passionate security researcher with over 2 years of professional experience focused on web application and API security. I specialize in identifying complex vulnerabilities and translating findings into actionable remediation guidance.

I have a proven track record discovering high-impact issues such as account takeovers, IDORs, broken access control, XSS, sensitive data exposure, and authentication flaws across international platforms. I collaborate effectively with platforms like HackerOne, Bugcrowd, Intigriti, Cantina, and others.

My methodology emphasizes deep application logic analysis, crafted payloads, bypass techniques, vulnerability chaining, and automation where appropriate using Python, JavaScript, and Bash. I deliver professional-quality proofs of concept and detailed reports recognized by companies worldwide.

I am seeking remote or hybrid penetration tester roles to transition bug bounty expertise into structured security engagements, and I am committed to continuous learning, methodology development, and improving organizational security postures through clear communication and real-world testing.