oolongeya — Offensive Security & Purple Team Engineer

Experience

Offensive Security Engineer

Perform red team exercises, penetration tests, and security reviews across the company’s web, application, and mobile services.
Strengthen network and endpoint defenses by translating emerging threats and offensive findings into effective security controls.
Research real-world zero-day vulnerabilities and develop practical detection and mitigation techniques.

2026 -

14th Security Consulting Track

Developed expertise in designing and evaluating end-to-end information security processes across diverse environments.

2025

An unauthenticated debug endpoint in Dgraph Alpha exposes the full process command line, including the configured admin token.

Google Gemini
Supply Chain Compromise + Prompt Injection / TOCTOU
2026Accepted
Google Bug Hunters CertifiedPublic
Temu
Missing Authorization
2026Medium (6.5)$4,000+
Open Redirect
2026Medium$3,000+
HackerOne CertifiedPublic
PayPal
Improper Access Control
2026Medium$3,500
Open Redirect
2026Low (3.4)$800
HackerOne CertifiedPublic
Bilt Technologies
Private Program
2026High$2,900+
HackerOne CertifiedPrivate
Snapchat
Improper Access Control
2026Medium (6.1)$1,000
HackerOne CertifiedPublic
Klarna
Missing Authentication
2026Medium (6.9)$900+
HackerOne CertifiedPublic
Nintendo Server Bug Bounty Program
Private Program
2026High$800+
HackerOne CertifiedPrivate
Automattic
Improper Access Control
2026High (7.5)$400
Cross-Site Request Forgery CSRF
2026Low (3.9)$100
HackerOne CertifiedPublic
EXNESS
Information Disclosure
2026Low (0.1–3.9)$300
Open Redirect
2026Low$100
HackerOne CertifiedPublic
Spotify
Improper Access Control
2026Medium (6.8)$200
HackerOne CertifiedPublic
Rank Math SEO
Missing Authorization
2026High (8.1)$20
Improper Access Control
2026High (7.7)$20
Improper Access Control
2026Medium (6.5)$20
Wordfence Certified
PlayStation
Unrestricted Upload of File with Dangerous Type
2026Low
HackerOne CertifiedPublic