Dheeraj Goswami

Penetration Tester | Security Researcher | Vulnerability Analyst

Talent

INMember since July 19, 2026

Web Application SecurityNetwork Penetration TestingAPI SecurityAI/LLM Security TestingThreat IntelligenceSIEMOWASP Top 10OWASP LLM Top 10Risk PrioritizationRemediation TrackingBurp SuiteSQLmapNmapNiktoVirusTotalAbuseIPDBURLScan.ioPythonFastAPI

Hire this person

Send a job offer directly to this candidate

Web Application SecurityNetwork Penetration TestingAPI SecurityAI/LLM Security TestingThreat Intelligence

About

Entry-level Penetration Tester with hands-on experience in web application security, network penetration testing, API security, and Active Directory exploitation. Proficient in OWASP Top 10 vulnerabilities (SQLi, XSS, IDOR, SSRF, Broken Authentication) and actively learning AI/LLM security testing including prompt injection, model abuse, and OWASP LLM Top 10 attack vectors. Experienced in vulnerability lifecycle management including risk prioritization, CVSS triage, and remediation tracking.

Actively builds custom Python-based offensive security tools and validates skills via HackTheBox and TryHackMe. Holds eJPT, CRTA, CPTS, and RHCSA certifications. Seeking a Junior Penetration Tester or Vulnerability Analyst role to contribute to real-world red team and VM engagements.

Experience

Junior Cybersecurity Intern (Remote) at HackerHub8 (2026-02 – Present)

Conducted web application and API penetration testing for OWASP Top 10 vulnerabilities including SQL Injection, Cross-Site Scripting (XSS), Broken Authentication, and Insecure Direct Object References (IDOR).
Performed end-to-end reconnaissance, enumeration, and attack surface analysis using Nmap, Burp Suite, Nikto, and SQLmap across web and network environments.
Managed end-to-end vulnerability lifecycle including risk prioritization, CVSS triage, and remediation tracking — authoring detailed technical reports with CVSS-scored findings and actionable remediation recommendations.
Developed PhishLens, a Python/FastAPI phishing email analysis platform integrating SPF/DKIM/DMARC validation, VirusTotal, AbuseIPDB, and URLScan.io threat intelligence APIs — reducing analyst triage time for phishing investigations.
Collaborated with senior penetration testers on penetration testing methodologies and contributed to security documentation and operational reporting.