Rahul Limbad

About Rahul Limbad

Cybersecurity Analyst with 2+ years of experience in IT support, network administration, and hands-on offensive security testing. Strong foundation in Vulnerability Assessment & Penetration Testing (VAPT) with a focus on web application security, network security, and system hardening.I have practical experience identifying and validating vulnerabilities such as Cross-Site Scripting (XSS), SQL Injection (SQLi), CSRF, IDOR, authentication flaws, access control issues, and security misconfigurations through both manual testing and automated tools.I have completed 100+ real-world labs and attack simulations across platforms like TryHackMe, PortSwigger Labs, DVWA, and CTF challenges, gaining strong exposure to reconnaissance, exploitation, and professional vulnerability reporting workflows.Alongside offensive security, I bring solid IT operations and infrastructure experience, including endpoint security, LAN/Wi-Fi configuration, firewall setup, patch management, backups, and server operations, allowing me to approach security from both attacker and defender perspectives.Core Focus Areas• Web Application Security & VAPT• Network & Wi-Fi Security• Bug Bounty & Security Research• Incident Response (Foundational)• Secure System & Network Administration Actively seeking opportunities in Cybersecurity Analyst, Junior Pentester, VAPT Analyst, SOC Analyst (Entry-Level), and Security Research roles.

Experience

1. Security Researcher (Independent)

   HackerOne

   Mar 2025 — Present

   As an independent Security Researcher on the HackerOne platform, I focus on identifying and documenting high-impact vulnerabilities for global organizations.Key Focus Areas:Web & AppSec: Identifying OWASP Top 10 vulnerabilities, including IDOR, Broken Access Control, and API security flaws.Vulnerability Research: Conducted targeted testing on programs such as Vercel and SendGrid to harden their external-facing infrastructure.Technical Reporting: Authoring professional Proof of Concept (PoC) reports detailing exploit vectors and remediation steps for security engineering teams.Reconnaissance: Utilizing advanced scanning and source code analysis to discover sensitive data leaks and exposed API keys.HackerOne Profile: hackerone.com/rahullimbad

Education

• Saraswati Vidya Mandir

  High School Diploma

• Viva College Of Engineering

  Associate of Computer Engineering