TL;DR I currently work as a Product Security Engineer at Atlassian (joined via Loom acquisition)

Security intern at MakeMyTrip in 2021 and Tinder AppSec in 2022 โ†’ Loom in 2023 leading AppSec and bug bounty (no, seriously!). I disclosed vulnerabilities to GitHub, GitLab, Glassdoor, NerdWallet, Bill.com and more during my short lived bug bounty career. Currently retired; the habits persist.

Currently Contributing to

  1. CyberPeace Institute
  2. W3C standards through security and privacy reviews, threat modeling, and recommendations (my reviews).

Oh yeah.. Also, I completed my Master’s in Cybersecurity at Northeastern University (May, 2023)… now you know where all those bounties went.

Articles

  1. 2021: Exploring extensions of dependency confusion attacks via npm package aliasing with Snyk
  2. 2021: How do bug bounty hunters use GitLab to help their hack? with GitLab

Bug Bounty via HackerOne (@deneuve)

Year In Review for 2021

HackerOne Review

All time reputation: 1118 (Ranked 1239) Signal: 5.91 (87th percentile) and Impact: 25.68 (96th percentile)

  • Ranked 2, on HackerOne’s (Upcoming Hackers) leader board for 2021 (Q1) (view stats here)
  • Ranked 31, on HackerOne’s leader board for 2021 (Q1, India) with an Impact: 32.86 (view stats here)