Software Engineer in Test (II) | Certified Ethical Hacker | Bug Bounty Hunter | Automation & Security Specialist
As a Software Engineer in Test (II) with over 4 years of experience, I specialize in designing and implementing test automation frameworks, conducting security assessments, and enhancing software quality for enterprise-grade applications. Certified as an Ethical Hacker (CEH), I excel in identifying and mitigating vulnerabilities, with a track record of discovering critical security flaws in Fortune 500 systems. As an active Bug Bounty Hunter, I’ve contributed to securing global platforms through responsible disclosure on HackerOne, Bugcrowd, and OpenBugBounty.
My expertise lies in:
- Developing scalable automation frameworks using Selenium, Playwright, and Cucumber.
- Performing penetration testing with tools like Burp Suite, OWASP ZAP, and SQLMap.
- Bridging software quality and security to deliver robust, user-centric applications.
Current Focus: Integrating AI-driven testing and advanced penetration testing to stay ahead in the evolving landscape of software quality and cybersecurity.
- Security Impact: Identified and reported 15+ critical vulnerabilities across platforms, including SQL Injection and XSS, earning recognition in HackerOne’s Hall of Fame.
- Automation Excellence: Developed a Selenium-Playwright hybrid framework, reducing test execution time by 40% and increasing test coverage to 95% for a financial application.
- Bug Bounty Success: Ranked in the top 5% of contributors on Bugcrowd, with 20+ high-severity bugs resolved across SaaS platforms.
- Open-Source Contributions: Authored 10+ scripts for vulnerability scanning, adopted by 500+ developers on GitHub.
- Certifications: Earned Certified Ethical Hacker (CEH), Selenium Professional, and OWASP Top 10 Security certifications.
- HackerOne: Discovered vulnerabilities in 5+ enterprise platforms, including a zero-day exploit in a payment gateway.
- Bugcrowd: Resolved 30+ bugs, with 80% classified as high or critical severity, enhancing platform security.
- OpenBugBounty: Secured 50+ websites globally through responsible disclosure, focusing on XSS and CSRF vulnerabilities.
| Project | Description | Tech Stack | Impact |
|---|---|---|---|
| Security-Automation-Tool | A Python-based CLI for automated vulnerability scanning and reporting. | Python, SQLMap, Nmap, Docker | 2k+ downloads, reduced scanning time by 50%. |
| Test-Automation-Framework | A hybrid Selenium-Playwright framework for end-to-end testing. | Selenium, Playwright, Cucumber, Jenkins | Adopted by 3 teams, improved CI/CD pipeline efficiency by 30%. |
| Bug-Bounty-Scripts | A collection of scripts for reconnaissance and vulnerability discovery. | Bash, Python, XSStrike, Dalfox | 1.5k+ stars, used by 100+ hunters globally. |
| API-Security-Tester | A Postman-based tool for automated API security testing. | Postman, JavaScript, OWASP ZAP | Identified 10+ API vulnerabilities in production systems. |
- Certified Ethical Hacker (CEH): EC-Council, 2022
- Selenium Professional: Udemy, 2021
- OWASP Top 10 Security: OWASP Foundation, 2023
- Playwright Automation: Test Automation University, 2024
- Portfolio: mejbaur.dev (WIP)
- Blog: Sharing insights on testing and security at medium.com/@fagun018
- Open to: Collaboration on open-source testing/security tools, speaking engagements, and mentorship.
I’m passionate about building secure, reliable, and high-quality software. Explore my repositories, star projects that inspire you, or reach out to collaborate on innovative testing and security solutions.
Last updated: May 18, 2025