Shahriar Khan

Experienced penetration tester with 5+ years in the field, skilled in identifying and mitigating cybersecurity vulnerabilities. Proficient in conducting comprehensive assessments, utilizing cutting-edge tools and methodologies. Proven track record in safeguarding digital assets and ensuring data integrity. Committed to staying current with industry best practices to provide robust security solutions.

Experience

Hack The Box — CTF Player (Seasonal)

APR 2018 - PRESENT

• Active Directory penetration testing, Web application penetration testing
• Manual and automated exploitation and vulnerability assessment.
• Achievements: Ranked Top 10 (#6) at Hack The Box among 100K+ hackers worldwide, achieving Omniscient rank.

Synack — Red Team Member (Freelance)

MAR 2021 - MAR 2023

• Conducted OWASP Top 10 assessments for high-profile clients.
• Produced detailed vulnerability reports with proof of concept.
• Offered remediation guidance and verified patch implementations.

HackerOne — Bug Bounty Hunter (Freelance)

APR 2017 - APR 2018

• Uncovered and reported security flaws in Yahoo's online platforms.
• Collaborated with Yahoo's security team to improve their infrastructure.
• Enhanced online security for millions of users.
• Achievements: Yahoo Hall of Fame listing, substantial income from responsible security vulnerability disclosure.

Education

Ahsanullah Institute of Technical and Vocational Education And Training, Dhaka — Diploma in Engineering

AUG 2011 - APR 2016

• Electrical Technology