Amaan Siddiqui

Top-ranked Bug Bounty Hunter and cybersecurity professional with 2 years of practical experience in Web, API, and Android application security testing. Recognized in the Hall of Fame of over 70 companies including Netflix, bitso, coindesk, mgmmacau, electroneum, consensus, underarmour, asana, cashapp, theforkb2c-wng, justeattakeaway, aylo-trafficjunky etc. Skilled in identifying critical vulnerabilities like IDOR, XSS, SQLi, and Android flaws.

CEH (Practical) certified, with expertise in manual testing, automation, and Android app analysis. Actively conducts cybersecurity awareness workshops to mentor and inspire the next generation of ethical hackers.

Independent Security Researcher at Bugcrowd (2023 – Present)

• Reported over 1,000 validated vulnerabilities across major platforms via Bugcrowd and private bug bounty programs.
• Discovered critical vulnerabilities including Authentication bypass, IDOR, Data Leaks, SQLi, XSS, Improper Rate Limiting, etc.
• Ranked among the Top 400 researchers globally on Bugcrowd; featured in the Hall of Fame for 70 organizations.
• Drafted detailed PoCs and professional reports, enabling fast remediation.
• Hands-on testing of the OWASP Top 10 risks, exploiting flaws like Broken Access Control, Injection, and Insecure Design.

Bachelor of Computer Applications in BCA – Integral University (2022 – 2025)

Practical-Certified Ethical Hacker in CEH – EC-Council (2024-12)