09/28/2026 updated
DN
100 % available
Senior Penetration Tester
Suharek, Kosovo
Only remote
Cyber Academy Certified Professional (CACP)Web Application Penetration Testing
Extensive experience in penetration testing of web applications, including identifying and exploiting vulnerabilities in live production systems, with published CVEs and a recognized HackerOne profile with over 3,000 reputation.
Network Security Testing
Hands-on expertise in conducting penetration tests on internal and external networks, assessing security posture and reporting exploitable vulnerabilities to client management.
Mobile Application Security
Practical experience in testing mobile applications for security vulnerabilities as part of comprehensive penetration testing engagements.
Vulnerability Research and CVE Assignment
Proven track record in vulnerability research, resulting in two assigned CVEs (CVE-2023-39960 and CVE-2023-33184) and recognition as 2021 VDP Researcher of the Year by the U.S. Department of Defense.
Red Team Operations
Certified Red Team Operator (Zero-Point Security, December 2024) with active membership on the Synack Red Team, testing client targets and reporting exploitable vulnerabilities.
Burp Suite and Web Assessment Tools
Certified Burp Suite Practitioner (PortSwigger, December 2023) and OffSec Web Assessor (OSWA), demonstrating advanced proficiency in web security assessment tooling.
Security Reporting and Client Communication
Skilled in writing detailed penetration test reports and presenting findings to client management, clearly explaining risks and remediation steps for each identified issue.
Side-Channel Attack Research
Author of the publication Practical Side-Channel Attacks in Web Applications, demonstrating deep knowledge of advanced attack techniques in web environments.
Hash Cracking and Cryptography Tools
Creator of CrackCrypt, a precomputed hash-to-plaintext database designed for instant hash cracking, showcasing practical tool development skills in the security domain.
Extensive experience in penetration testing of web applications, including identifying and exploiting vulnerabilities in live production systems, with published CVEs and a recognized HackerOne profile with over 3,000 reputation.
Network Security Testing
Hands-on expertise in conducting penetration tests on internal and external networks, assessing security posture and reporting exploitable vulnerabilities to client management.
Mobile Application Security
Practical experience in testing mobile applications for security vulnerabilities as part of comprehensive penetration testing engagements.
Vulnerability Research and CVE Assignment
Proven track record in vulnerability research, resulting in two assigned CVEs (CVE-2023-39960 and CVE-2023-33184) and recognition as 2021 VDP Researcher of the Year by the U.S. Department of Defense.
Red Team Operations
Certified Red Team Operator (Zero-Point Security, December 2024) with active membership on the Synack Red Team, testing client targets and reporting exploitable vulnerabilities.
Burp Suite and Web Assessment Tools
Certified Burp Suite Practitioner (PortSwigger, December 2023) and OffSec Web Assessor (OSWA), demonstrating advanced proficiency in web security assessment tooling.
Security Reporting and Client Communication
Skilled in writing detailed penetration test reports and presenting findings to client management, clearly explaining risks and remediation steps for each identified issue.
Side-Channel Attack Research
Author of the publication Practical Side-Channel Attacks in Web Applications, demonstrating deep knowledge of advanced attack techniques in web environments.
Hash Cracking and Cryptography Tools
Creator of CrackCrypt, a precomputed hash-to-plaintext database designed for instant hash cracking, showcasing practical tool development skills in the security domain.
Experience
Professional experience5 - 10 years
Freelancer since2025
Languages
EnglishFluentAlbanianNative speaker
Project history
Testing client targets on the Synack platform as a vetted member of the Synack Red Team, reporting exploitable vulnerabilities on live production systems.
Running penetration tests on web applications, mobile applications, and internal and external networks. Writing reports and presenting findings to client management, explaining risks and remediation. Keeping up with new vulnerabilities and exploitation techniques and reviewing intelligence relevant to engagements and targets.