My Story
I’m Suvendu Dash, an offensive security engineer, penetration tester and bug bounty hunter from India. My job is to find the weaknesses attackers look for, and to help the teams who own them fix them properly.
How it started
It started with curiosity about how software works, and how it breaks. That curiosity became a passion for finding and fixing security flaws in apps and systems. My first job, in 2020, was as an IT trainee engineer at Asiczen Technologies.
Five years in fintech security
In 2021 I joined INDmoney as a Software Engineer in Cyber Security. Over the next five years I grew into Senior Product Security Engineer, then Principal Security Engineer, and finally Senior Principal Security Engineer, a role I held until October 2026. The work covered penetration testing of web, mobile and API products, AWS cloud security, secure code review, DevSecOps and security automation for a platform handling real money and personal data.
Bug bounty and research
Since 2021 I have been an independent security researcher on HackerOne, Bugcrowd and YesWeHack, and from 2022 to 2023 I was a red team member at Pentabug. I have reported vulnerabilities to more than 30 companies, and the security teams at Apple, Microsoft and OpenAI have listed me in their Halls of Fame. I have also been recognised by NCIIPC, Government of India. You can see these on the Hall of Fame and Rewards pages, and read some of my write-ups on the blog.
How I work
I have tested products in banking, trading, finance, healthcare and e-commerce, in India and abroad. My approach is the same everywhere: test like an attacker, prove impact with a clear proof of concept, and write findings that developers can fix without guesswork. No scanner noise and no generic checklists.
I keep learning, because attackers do. New frameworks, cloud services and attack techniques appear every month, and staying sharp is part of the job.
Work with me
If you need a penetration test, a security review or help building security into your engineering process, see my work or get in touch.