Offensive Security Consultant, Ernst & Young
Jul, 2024 - Present
Conduct vulnerability assessments and penetration testing services for global enterprise clients and local clients across financial services, industrial, and technology sectors.
Tested authentication, MFA and business logic controls in high-value flows, covering server-side validation gaps
Bypassed rate limiting, input validation and upload controls through payload crafting
Maintained communication with stakeholders involved throughout engagements, keeping them updated on progress
Reported each finding with CVSS scoring and associated recommendation, transating exploit chains into concrete business impact
Retested fixes with client dev teams post-remediation
