Umesh P. profile photo 1 on Tal

Umesh P.

Security Analyst | Bug Bounty Hunter | Cybersecurity Enthusiast | VAPT

Nagpur

4+ years of work experience

Jinvani Media and Entertainment
Sep 20251 y 1 moPresent

Remote

•Conducted vulnerability assessments and penetration tests across 20+ client web applications and internal networks, identifying 150+ high/critical vulnerabilities to date. •Developed custom Python and Bash automation scripts to streamline recon, enumeration, and reporting — reducing manual assessment time by 40%. •Conducted red team exercises simulating real-world APT tactics aligned with MITRE ATT&CK framework, successfully bypassing EDR solutions on 3 separate engagements. •Performed source code review for PHP and JavaScript applications, discovering OWASP Top 10 flaws including SQLi, XSS, IDOR, SSRF, and Broken Authentication. •Investigated 30+ security incidents including phishing campaigns, malware infections, and insider threats using Splunk and Wazuh SIEM platforms. •Hardened AWS cloud environments — remediated IAM misconfigurations, exposed S3 buckets, and vulnerable EC2 instances.
Bugcrowd
Jun 20224 yrs 5 mosPresent

Remote

We Digital Entrepreneur
Jan 20232 yrs 7 mosJul 2025

Nagpur, Maharashtra, India

•Assisted in monitoring and investigating security events and potential threats across internal systems •Performed vulnerability scanning and basic security assessments on web applications and APIs •Analyzed application security issues and supported remediation efforts with development teams •Maintained security reports, incident records, and technical documentation for identified vulnerabilities

Umesh’s AI Stack

claude
claude
codex
codex
deepseek
deepseek
hermes agent
hermes agent

Education

Rabindranath Tagore University

Bachelor's degree, Computer Science

Rabindranath Tagore University

20184 yrs2022

Join Umesh and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Umesh P. on Tal

Headline

Security Analyst | Bug Bounty Hunter | Cybersecurity Enthusiast | VAPT

About

🔐 Security Analyst | Bug Bounty Hunter | Cybersecurity Enthusiast I’m a passionate security professional with hands-on experience in vulnerability research, penetration testing, and real-world exploit discovery. My journey started with curiosity for how systems work (and break), which evolved into a career dedicated to strengthening defenses and protecting organizations from evolving cyber threats. 💻 As a Bug Bounty Hunter, I’ve uncovered critical vulnerabilities across diverse platforms, earning recognition in Hall of Fames and contributing to safer digital ecosystems. I thrive on breaking down complex security challenges, applying frameworks like OWASP Top 10, and leveraging tools like Burp Suite, SQLmap, and custom scripts to identify and remediate weaknesses. 🌍 Beyond the technical side, I’m driven by a mission: making the digital world a safer place. I constantly sharpen my skills, explore new attack vectors, and collaborate with security communities to stay ahead of threats. 🔎 Key Highlights: ● Security Analyst with expertise in web application & network security ● Bug bounty hunter with multiple acknowledged discoveries ● Skilled in Bash, Python, PHP, JavaScript & automation for security testing ● Experienced in vulnerability assessment, penetration testing, and incident analysis ⚡ Always curious. Always learning. Always securing.

Location

Nagpur

AI stack

claude

codex

deepseek

hermes agent

Work experience

Security Analyst at Jinvani Media and Entertainment, Sep 2025 - Present · 1 y 1 mo, Remote, •Conducted vulnerability assessments and penetration tests across 20+ client web applications and internal networks, identifying 150+ high/critical vulnerabilities to date. •Developed custom Python and Bash automation scripts to streamline recon, enumeration, and reporting — reducing manual assessment time by 40%. •Conducted red team exercises simulating real-world APT tactics aligned with MITRE ATT&CK framework, successfully bypassing EDR solutions on 3 separate engagements. •Performed source code review for PHP and JavaScript applications, discovering OWASP Top 10 flaws including SQLi, XSS, IDOR, SSRF, and Broken Authentication. •Investigated 30+ security incidents including phishing campaigns, malware infections, and insider threats using Splunk and Wazuh SIEM platforms. •Hardened AWS cloud environments — remediated IAM misconfigurations, exposed S3 buckets, and vulnerable EC2 instances.

Bug Bounty Hunter at Bugcrowd, Jun 2022 - Present · 4 yrs 5 mos, Remote

Junior Security Analyst at We Digital Entrepreneur, Jan 2023 - Jul 2025 · 2 yrs 7 mos, Nagpur, Maharashtra, India, •Assisted in monitoring and investigating security events and potential threats across internal systems •Performed vulnerability scanning and basic security assessments on web applications and APIs •Analyzed application security issues and supported remediation efforts with development teams •Maintained security reports, incident records, and technical documentation for identified vulnerabilities

Education

Bachelor's degree, Computer Science, Rabindranath Tagore University