Offensive Security Professional
Rohit Sharma
Security Analyst | Bug Bounty Hunter — specialized in Web, API, Mobile, and Network Security.
Cyber Security Analyst with 4+ years in bug bounty and professional pentesting. Reported 500+ vulnerabilities across web, API, mobile, and network targets, and delivered 70+ pentest projects for startups and enterprises. Recognized by Apple (10x), Nvidia, Lenovo, RedHat, and more. Strengths include black-box/gray-box testing, scope validation, cloud audits, and actionable VAPT reporting.
About Me
I’m a Cyber Security Analyst focused on offensive security and continuous improvement. I conduct VAPT with an emphasis on black-box testing and exploit development to uncover critical vulnerabilities. I’ve reported 500+ vulnerabilities and completed 70+ professional pentest engagements, helping teams reduce misconfigurations and strengthen security posture across web, mobile, APIs, and networks. I’ve also contributed CVEs and received multiple Hall of Fame acknowledgments from industry leaders including Apple (10x), Nvidia, Lenovo, and RedHat.
Vulnerabilities Reported
500+
Pentest Projects
70+
Hall of Fame Acks
50+
Experience
- R
Security Analyst — Breachlock
- Pentesting across web, API, thick client, Android/iOS, and internal/external networks.
- PCI DSS testing, phishing assessments, OSINT, and Microsoft 365 reviews.
- Cloud audits on Azure, AWS, GCP, O365; streamlined PTaaS workflows and remediation tracking.
- Mentored junior analysts on methodologies and exploitation techniques.
- A
Security Analyst Trainee — Appzlogic
- Led SAST/DAST and VAPT across web and API applications; authored security test cases.
- Manually found 120+ vulnerabilities across 14+ pentests; improved client awareness.
- F
Freelance Cyber Security Analyst — Various
- Reduced vulnerabilities for clients by 30% through detailed reporting and VAPT.
- Secured a proprietary trading platform handling $3.7M+ weekly payouts.
- Specialized in OWASP Top Ten; contributed to security research with payouts.
- I
Cyber Security Summer Intern — Cyber Cell
- Assisted in investigations and incident response; conducted forensics and OSINT.
- Created checklists, guidance for public security hygiene, and authored reports.
- B
Bug Bounty & CVEs
- Apple Inc. Hall of Fame (10x) through April 2024.
- Nvidia Hall of Fame (Oct 2022); RedHat acknowledgment (Jul 2022); Lenovo InfoSec (May 2022).
- Published CVEs: CVE-2022-3774, CVE-2023-5302.
Skills
- • OWASP Top 10
- • SAST/DAST
- • Secure Code Review
- • iOS / Android
- • OWASP MSTG
- • REST / SOAP
- • AuthN/AuthZ
- • Scope Validation
- • Internal/External
- • Threat Modeling
- • AWS / Azure / GCP
- • O365
- • PCI DSS
- • SIEM Awareness
- • VAPT Reporting
- • PTaaS Workflows
Services for Companies
Tailored penetration testing and security assessments to strengthen your organization's security posture.
- OWASP Top 10, misconfigurations, privilege escalation
- Actionable remediation guidance and retesting
- Phishing simulation and social engineering resilience checks
- Secure storage, transport, and runtime protections
- Azure, AWS, GCP configuration and least-privilege reviews
- Monitoring, logging, and incident response readiness
- Testing strategy, timelines, and risk-based prioritization
- Compliance-aligned reporting (PCI DSS, ISO references)
Resume
Resume.pdf
Latest version available
Hall of Fame
50+ Security Acknowledgments
Recognized by leading organizations worldwide for responsible security disclosure
11 Times
July 2021 - July 2024
Multiple security acknowledgments across iOS, macOS, and web services
Hall of Fame
Oct 2022
Graphics and AI platform security
Hall of Fame
Jul 2022
Enterprise Linux and cloud security
Hall of Fame
Jun 2023
Enterprise software security
Hall of Fame
May 2022
Hardware and firmware security
Hall of Fame
Jun 2022
Cybersecurity platform vulnerabilities
Acknowledgment
Apr 2022
Academic infrastructure security
Acknowledgment
Sep 2022
Educational platform security
Acknowledgment
Feb 2023
Research system security
Acknowledgment
2022
Campus network security
Hall of Fame
Sep 2022
Industrial equipment security
Hall of Fame
Apr 2022
Automotive platform security
Hall of Fame
Jun 2021
Telecommunications security
Hall of Fame
May 2021
Network infrastructure security
Hall of Fame
Sep 2021
Mobile network security
Hall of Fame
Nov 2021
Automotive systems security
Recognition 2024
Oct 2024
Open-source security bug identification and reporting
Government Recognition
Mar 2021
Critical infrastructure vulnerability disclosure
Published CVEs
CVE-2022-3774
Security vulnerability disclosure
CVE-2023-5302
Coordinated vulnerability disclosure
Achievements & Recognition
- CVE-2022-3774
Vulnerability disclosure and remediation guidance
- CVE-2023-5302
Coordinated disclosure improving ecosystem security
Blog
Visit MediumContact
Open to security consulting, VAPT, and research collaborations. Connect with me on LinkedIn for the fastest response.