Junior Web Application Penetration Tester | Security Assessment & Vulnerability Analysis
I am a junior penetration tester with a focused specialization in web application security. My work centers on identifying vulnerabilities that could expose a business to real risk, and helping teams understand exactly what needs to be fixed and why.
During an engagement, I test across all major areas of web application security including authentication weaknesses, broken access controls, injection flaws, session management issues, and business logic errors. I follow the OWASP Top 10 as a core reference point and combine manual testing techniques with tools like Burp Suite and OWASP ZAP to make sure nothing gets missed.
I also cover API security, including REST and GraphQL endpoints, checking for common issues like improper authentication, excessive data exposure, and missing rate limiting controls.
Every assessment I deliver comes with a written report that clearly explains what was found, how severe each issue is, and what steps should be taken to fix it. I write for both technical and non-technical readers so the findings are actually useful to the whole team, not just developers.
All testing is performed strictly within agreed scope and with proper authorization. Confidentiality is taken seriously throughout every stage of the engagement.
If you need a careful, methodical tester who takes web application security seriously, I would be glad to work with you.