Zahidul Islam
Security Researcher • Full-Stack Builder
Security researcher focused on web and API vulnerability research, with a background in full-stack development and IT operations. Proactively researching high-impact vulnerabilities across private bug bounty and responsible disclosure programs.
Experience
Independent Security Researcher
Jan 2026 – Present
Bug Bounty & Vulnerability Research Programs
- Conduct web application and API security assessments across private bug bounty and responsible disclosure programs to proactively identify and validate high-impact vulnerabilities.
- Identify and validate complex security flaws including authentication bypasses, authorization issues (IDORs), CORS misconfigurations and business logic flaws.
- Author detailed technical vulnerability reports featuring proof-of-concept (PoC) exploits, impact assessments and actionable remediation recommendations.
IT Support Specialist
Apr 2018 – Dec 2025
Shaolin Science (An Education Platform) • Hybrid
- Provided technical support by troubleshooting hardware, software and network issues across organizational devices.
- Managed system configuration, routine maintenance, device security and data backup to ensure operational reliability.
- Designed digital graphics and educational materials to support online learning content and institutional branding.
Web Developer
Apr 2025 – Jul 2025
Quanteron (Full-stack Technology Solutions Provider) • Remote
- Contributed code and bug fixes to Web3-based open-source GitHub projects while maintaining technical documentation and development workflows.
- Designed and developed a GitHub Issue Tracker tool using Python to automate issue discovery and streamline manual issue triage, improving developer productivity.
- Debugged, tested, and optimized cross-platform applications while following modern software development workflows.
Technical Skills
Programming
Python
Go
JavaScript
Bash
Web / AppSec
nmap
burp
wireshark
nuclei
ffuf
httpx
Frameworks
React.js
Next.js
Native
Tailwind CSS
Svelte
DevOps & Cloud
GCP
AWS
Docker
Git
SIEM
Splunk
QRadar
Sentinel
Domains
Offensive Security
Web/API/Cloud Pentesting
Vulnerability Management
Linux Administration
OWASP Frameworks
Featured Security Projects
Honors & CTF Rankings
Top 7 (Preliminary) and Top 22 (Final) — MIST CYBERRAID CTF 2025, organized by the Bangladesh Army.
2025
Top 10 — BUET CTF 2024 and EWU CTF 2024.
2024
Finalist — HackerOne BugHunt 2023, 2024 and MIST HackMeIfYouCan CTF 2023.
2023–24
2nd Prize — Project Exhibition for developing the WPS Vulnerable Wi-Fi Scanner.
—
Education
Bachelor of Science in Computer Science and Engineering
Jan 2020 – Dec 2025
Institute of Science and Technology, Dhaka • National University of Bangladesh
Core Coursework: Information Security, Operating Systems, Computer Networking, Data Structures & Algorithms, Database Management Systems, Software Engineering, Computer Architecture, Artificial Intelligence.