Haris Firdous Shah
AppSec+ | CloudSec+ | VAPT | Security Operations | OSINT | FinTech SaaS
- Role
- Researcher at HackerOne
- Location
- Bengaluru, KA, IN
- LinkedIn followers
- 500 followers
About Haris Firdous Shah
Found my first bug at 16. I work across Application and Cloud Security in FinTech SaaS environments, conducting end-to-end VAPT across web, API, and cloud infrastructure. My approach combines offensive testing—exploiting logic flaws, misconfigurations, and attack surface gaps—with defensive operations including WAF, EDR/EPP, and threat detection. I leverage large-scale OSINT and reconnaissance to map exposures that automated tools overlook, then validate exploitability and guide remediation. Whether it\'s breaking authorization, bypassing defenses, or hardening cloud posture, I focus on vulnerabilities that matter—the ones that translate to real business risk in production systems.
Experience
Researcher
Nov 2025 — Present · Bengaluru, IN
Education
HKBK Group of Institutions
Bachelor of Technology - BTech, Computer Science
2021 — 2024
Visvesvaraya Technological University
Bachelor of Engineering - BE, Computer Science
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.