Shreedeep Dey

About Shreedeep Dey

Hi, I am Shreedeep Dey, an enthusiastic and self-driven cybersecurity professional with a strong knowledge in web application penetration testing, API security, and a solid grasp of network security fundamentals. Having solved over 200+ labs on platforms like PortSwigger Academy and TryHackMe, I continuously hone my skills by tackling real-world scenarios and staying updated with the latest in cybersecurity. I am actively exploring opportunities to apply my skills in the real-world to enhance digital security and contribute to building safer systems. While I have recently started exploring bug bounty hunting, my hands-on experience with tools like Burp Suite, Nmap, and Metasploit has equipped me to identify and mitigate vulnerabilities effectively. ‍My academic credentials include a Diploma in Cybersecurity (86.66%) from EC-Council and a Bachelor’s Degree in Commerce with a 9.11 CGPA, showcasing my dedication to both technical learning and academic excellence. In spite of coming from a different graduation background, I am relentlessly pursuing my unstoppable passion for Penetration Testing and Ethical Hacking, driven by my commitment to mastering the art of securing digital landscapes.I recently started my journey in bug bounty hunting from BugCrowd, and it has been an exhilarating experience—pushing me to grow, sharpen my skills every day, and enjoy the thrill of uncovering vulnerabilities!🤩 I am passionate about exploring new domains in cybersecurity, including Active Directory penetration testing and GraphQL API security, while maintaining a growth-oriented mindset. With every challenge, I strive to improve myself, embrace innovation, and contribute meaningfully to secure digital landscapes. During my recent internship, I am working on real-world web applications and discovering high-impact vulnerabilities like Stored XSS, Broken Access Control, and Response Manipulation—an experience that strengthening both my technical capabilities and confidence.I am eager to connect with like-minded professionals and organizations to make impactful contributions and grow further in this exciting field. 🤝

Experience

1. Security Analyst

   ISECURION

   Feb 2025 — Present · Bengaluru, IN

   Hands-on experience in conducting security assessments on real-world applications, identifying vulnerabilities, and providing effective mitigation recommendations.The vulnerabilities I have already identified here are:1) Broken Access Control : Unauthorized access to an admin-level functionality.2) Stored XSS : Stored XSS in an image input field on a gallery page.3) Unauthorised access through Response Manipulation : Access to the application is possible without correct username password through Response Manipulation4) Blind SQLI : Exploited a Blind SQLI manually through fuzzing with conditional response timing5) Client-side UI Restriction Bypass : Bypassed Client-side role-based restriction on a button and got unauthorized access to sensitive data6) Cross Site Request Forgery7) Chained a low level vulnerability with a medium level vulnerability to increase the severity

Education

• Indian School Of Ethical Hacking

  Diploma in Cybersecurity

  2022 — 2023