Kamran Amin

I'm a Cybersecurity Specialist and Penetration Tester with 3+ years of experience across web application security testing, API vulnerability assessments, and full-stack software development. I hold a BS in Software Engineering (CGPA 3.53) and the Google Cybersecurity Professional Certificate, giving me a strong foundation in both building and securing modern web architectures. My primary expertise lies in OWASP methodologies, conducting manual VAPT, and leveraging tools like Burp Suite, Nmap, SQLmap, and Metasploit to identify critical flaws including IDOR/BOLA, Broken Access Control, SQL Injection, CSRF, and business logic bypasses. Across prior roles at tech firms and client engagements, I've delivered end-to-end security audits, executed reproducible PoCs, and worked directly with engineering teams to remediate complex security vulnerabilities. Having worked as a developer prior to focusing on offensive security, I understand code-level fixes and DevSecOps practices. I'm looking for a remote Penetration Testing, Application Security, or Cybersecurity Engineer role where I can perform high-impact security assessments, secure APIs and web products, and contribute to an async-first engineering team.