Vulnerability Assessment & Penetration Testing
End to end VAPT engagements combining automated scans with deep manual validation and business logic analysis.
$whoami
Subhakrit Rajbhandari
Security Researcher · Ethical Hacker
Cybersecurity enthusiast with a strong passion for securing digital systems and ethical hacking, sparked from an early age. Driven by curiosity and a focus on understanding systems and applications to make them stronger and more resilient. Committed to continuous learning and enhancing digital ecosystems in the ever evolving field of cybersecurity. Helping organizations validate their security posture through rigorous manual assessments of web applications, APIs, mobile apps, and thick clients, and delivering clear, actionable remediation aligned with industry best practices.
- 0+
- Security Assessments
- 0+
- Years of Experience
- 0
- Hall of Fame
Security Researcher
Ethical Hacker
Manual · zero day ready
Skills
Areas of Expertise
Web Application Security
Testing enterprise web platforms against OWASP Top 10 with realistic exploit paths and proof of concept development.
API Security Testing
Assessing authentication, authorization, and logic flaws in REST and GraphQL APIs that power critical services.
Mobile Application Security
iOS and Android security testing including traffic interception, storage analysis, and binary inspection.
Thick Client Security Testing
Desktop application testing including decompilation, insecure storage, and transport level weaknesses.
Risk Assessment
Structured discovery and risk ranked findings mapped to real business impact and remediation priority.
Source Code Review
Auditing application code for injection, auth, and cryptographic flaws with actionable, fix level guidance.
Technical Documentation
Clear, structured security documentation with findings, risk ratings, and practical remediation guidance.
Experience
Professional Experience
Security Researcher
Full Time 2024 — PresentEminence Ways Pvt. Ltd.
Working as a Security Analyst at Eminence Ways Pvt. Ltd., delivering offensive security assessments and strengthening the security posture of enterprise clients.
- Conduct end to end Web Application Penetration Testing across enterprise platforms, validating findings with manual techniques and proof of concept development.
- Perform API Security Assessments covering authentication, authorization, and business logic flaws in mission critical services.
- Execute Mobile Application Security Testing on iOS and Android targets, including traffic analysis and binary review.
- Carry out Thick Client Penetration Testing across production and staging infrastructure.
- Deliver structured reporting with risk analysis, remediation guidance, and client ready technical documentation.
- Align assessments with OWASP Top 10, secure development principles, and industry best practices.
Core Responsibilities
Education
Academic Foundation
Education Timeline
Primary
Bhanubhakta Memorial School
Computer Science
Secondary (+2)
Kathmandu Model College (KMC)
Management · Computer Science
Bachelor’s Degree
National College of Management and Technical Science (NCMT)
Bachelors in Cyber Security & Networking
Certifications & Licenses
ISO/IEC 27001:2022 Lead Auditor
Audit & Governance
Certified AppSec Practitioner (CAP)
Application Security
Certified Network Security Practitioner (CNSP)
Network Security
Certified Threat Intelligence & Governance Analyst (CTIGA)
Threat Intelligence
Certified Cybersecurity Educator Professional (CCEP)
Security Education
ISO/IEC 27001:2022 Information Security Associate
Information Security
Master in Prompt Engineering and AI
AI & Engineering
Ethical Hacking: Web Application Hacking
Offensive Security
Pentest+: Planning and Scoping Applications
Penetration Testing
Achievements
Hall of Fame
Recognized by organizations for identifying and responsibly reporting security vulnerabilities.
Responsible Disclosure Hall of Fame
WebSec · Netherlands
Reported a medium severity vulnerability through the public Responsible Disclosure Program, contributed to its remediation, and earned recognition in WebSec’s Hall of Fame.