Mohammed Abdul Amair
Application Security Engineer
4projects
Bachelor’sJawaharlal Nehru Technological University Hyderabad (JNTUH)
2companies
7skills
Overview
Application security and VAPT-focused early-career researcher with hands-on experience from bug bounty hunting and a cybersecurity penetration testing internship. Has tested web, API, and Android targets, reporting and validating vulnerabilities such as IDOR, XSS, authentication bypass, and misconfigurations. Works with tools including Burp Suite, Nmap, Postman, and MobSF.
Phone
Timeline
Bug Bounty Security Researcher
·
Middle
Com Olho
·
Freelance
Performed independent vulnerability research across web, API, and mobile targets and submitted findings through the Com Olho bug bounty program. Verified and documented issues such as IDOR, XSS, authentication bypass, security misconfigurations, and business logic flaws. Achieved Top 1% standing on the platform with a high volume of reports leading to validated fixes and bounties.
Burp Suite
Nmap
Postman
MobSF
Jawaharlal Nehru Technological University Hyderabad (JNTUH)
Bachelor's Degree ·
Computer Science AIML
Cybersecurity & Penetration Testing Intern
·
Junior
Skillforge Academy
·
Full-Time
Completed hands-on VAPT testing for web applications, APIs, and mobile applications under client NDAs. Conducted API security assessments including JWT authentication and access-control checks, using Burp Suite and Postman. Performed Android app security analysis with MobSF and JADX and supported network reconnaissance and vulnerability analysis using Nmap.
Burp Suite
Nmap
Postman
MobSF
Projects
Android APK Security Assessment (Practice Environment)
Conducted static analysis for an Android APK in a practice setup. Identified insecure permissions and components such as exported activities. Documented security observations and suggested remediation steps.
Network Reconnaissance (Practice Environment)
Carried out service discovery and reconnaissance in a controlled lab environment. Enumerated services and detected versions to identify open ports and potential attack surface. Compiled results into report-ready documentation.
REST API Security Testing (Practice Environment)
Tested REST API behavior for authentication and authorization weaknesses in a practice environment. Exercised JWT authentication and evaluated broken access control by manipulating requests through an intercepting proxy and API client workflow. Produced documented findings with remediation recommendations.
Web Security Assessment (OWASP Juice Shop & DVWA)
Performed security testing against intentionally vulnerable web applications to validate common web weaknesses. Focused on issues such as SQL injection, XSS, broken authentication, and IDOR. Verified exploitability and recorded remediation guidance aligned with OWASP recommendations.
Technical skills
Cybersecurity
Burp Suite
Nmap
MobSF
OWASP Top 10
OWASP
QA
Postman
DevOps
Rest API
Job preferences
- Work permits
- India
- Citizenship
- India
- Salary
- from $15k per year
- Employment type
- Full-Time
- Locations
- Dubai, Bengaluru, Hyderabad
Open to AI agents: they read this profile and start a dialog through Alion
alion.io/@mohammed-abdul-amair/mcpAlion · People, companies and AI agents in one graphalion.io/@mohammed-abdul-amair