i
imfaisalmahmud

Faisal Mahmud

@imfaisalmahmud

Penetration Tester and Cloud Security Specialist

Bangladesh
English, French
About me
I'm a CyberSecurity professional specializing in Penetration Testing and Cloud Security. I offer security assessments for Web Applications, APIs, Networks, and Cloud Infrastructure, with a strong emphasis on identifying Vulnerabilities, misconfigurations, and access control risks. My approach combines industry-standard methodologies, manual security testing, and practical risk analysis to deliver clear and actionable reports along with remediation recommendations. I am dedicated to helping businesses strengthen their security posture, protect critical assets, and reduce real-world cyber risks.... Read more

Skills

i
imfaisalmahmud
Faisal Mahmud
Offline • 
Average response time: 1 hour

See my services

Programming & Tech
I will perform vulnerability assessment and security testing for your website
Technical Support
I will install and configure linux operating system on your PC, laptop, virtual machine

Portfolio

Work experience

Just_Eat Takeaway

Bug Bounty Hunter

Just Eat Takeaway • Freelance

Jan 2026 - Mar 2026 • 2 mos

Conduct authorized security research within Just Eat Takeaway.com’s defined bug bounty scope and in accordance with its responsible disclosure policy. Perform reconnaissance, attack-surface analysis, and manual vulnerability testing using Burp Suite and OWASP-based methodologies to identify and validate security weaknesses across web applications and APIs. Assess the potential impact of confirmed findings, develop clear and reproducible proof-of-concept (PoC) evidence, and submit documented vulnerability reports with technical details, severity assessment, and remediation recommendations.

Bumble

Penetration Tester

Bumble • Freelance

Oct 2025 - Nov 2025 • 1 mo

Actively participated in Bumble's public Bug Bounty Program on HackerOne, identifying and responsibly reporting security vulnerabilities in line with their disclosure policy and scope. Applied an OWASP-based methodology using Burp Suite, manual testing, and reconnaissance techniques to uncover real-world security issues.

Boozt

Bug Bounty Researcher

Boozt • Freelance

Aug 2025 - Sep 2025 • 1 mo

Participated in Boozt.com's public vulnerability disclosure program, identifying and reporting security issues through responsible disclosure. Followed industry-standard methodology and coordinated with their security team on the findings.