Umesh Paytode

Security Analyst with 3.5+ years in vulnerability assessment and penetration testing. Proven ability to identify, validate, and prioritize web application vulnerabilities including IDOR, SSRF, Broken Access Control, SQL Injection, and XSS. Strong command of the OWASP Top 10, secure SDLC, secure coding, and risk assessment. Discovered 100+ high/critical vulnerabilities and responsibly disclosed 40+ valid bugs in public bug bounty programs.

Security Analyst at Jinvani Media and Entertainment (2025-09 – Present)

• Perform security assessments across 20+ web applications and APIs, identifying and validating 100+ high/critical vulnerabilities.
• Specialize in access control & SSRF testing; validate IDOR / Broken Access Control and SSRF findings and drive remediation.
• Conduct secure code reviews (PHP, JavaScript) uncovering SQL Injection, XSS, IDOR, SSRF, and Broken Authentication.
• Review authentication and authorization flows (sessions, roles, OAuth / JWT) for misconfigurations and privilege escalation.
• Automated recon and reporting with custom Python/Bash tooling, reducing manual assessment time by 40%.

Junior Security Analyst at We Digital Enterpreneur (2023-01 – 2025-06)

• Performed vulnerability scanning and security assessments on web applications and APIs.
• Analyzed application security issues and supported remediation efforts with development teams.
• Monitored security events and supported incident response and log analysis.

Bug Bounty Hunter at HackerOne / Bugcrowd (2022-07 – Present)

• Discovered and responsibly disclosed 100+ valid vulnerabilities, including IDOR, Broken Access Control, Authentication Bypass, SQL Injection, and Stored XSS.
• Reported critical-severity bugs in Fortune 500 programs; received Hall of Fame recognition from 50+ organizations.

B.E. in Computer Science – Rabindranath Tagore University, Bhopal (2022)