Tarikul Islam

Tarikul Islam

alias sa1tama0 · Birmingham, UK

7+ years of hands-on web and mobile penetration testing. I identify and help remediate security vulnerabilities that strengthen organizational security posture — working through Synack, Yogosha, and multiple bug bounty programs, consistently surfacing critical findings and collaborating with teams to fortify their digital assets.

↓ Download CV

Nov 2025 — Oct 2026

Freelance · Remote

Security Researcher — Strike Force

Y Yogosha

Conduct authorised penetration testing and vulnerability research against in-scope corporate applications
Investigate web application vulnerabilities, business-logic flaws and access-control weaknesses
Validate findings with manual testing and security tools, and assess potential impact
Prepare structured reports with reproduction steps, proof-of-concept evidence and remediation guidance

Feb 2025 — Aug 2026

Full-time · 1 yr 6 mos

Cyber Security Analyst

D Disclosify Ltd · Dhaka, BD

Conducted technical security assessments and vulnerability analysis across client environments
Analysed software and network architectures to identify security weaknesses and potential attack paths
Assessed technical risks and recommended mitigation measures to improve security posture
Documented security findings, supporting evidence and remediation recommendations for stakeholders

Dec 2022 — Oct 2026

Freelance · 3 yrs 10 mos

Red Team Member

S Synack Red Team

Perform authorised security assessments against in-scope enterprise applications and systems
Identify and validate vulnerabilities, including SQL injection, Cross-Site Scripting (XSS) and Insecure Direct Object References (IDOR)
Conduct reconnaissance and attack-surface mapping to identify exposed application components
Perform patch verification to confirm that reported vulnerabilities have been effectively remediated
Ranked fourth all-time among Bangladesh-based Synack Red Team members

Jan 2019 — Dec 2022

Part-time · 3 yrs 11 mos

Ethical Hacker

B Bugcrowd

Conducted independent security research through authorised vulnerability disclosure programmes
Investigated vulnerabilities involving blind XSS, cross-site request forgery (CSRF), domain takeover and account compromise
Documented findings with technical evidence and reproducible testing steps
Hall of Fame recognition from organisations including Cisco, Dell and GoPro

Nov 2018 — Dec 2022

Part-time · 4 yrs 1 mo

Ethical Hacker

H1 HackerOne

Researched application security vulnerabilities across web applications and online services
Investigated SQL injection, DOM-based XSS, subdomain takeover, open redirects and account-takeover weaknesses
Validated issues with manual testing and reported technical impact and remediation considerations
Hall of Fame recognition from organisations including Meta, Reddit and Coursera

Experience

Security Researcher — Strike Force

Cyber Security Analyst

Red Team Member

Ethical Hacker

Ethical Hacker

CTF Achievements

Education & Certifications

MSc in Cyber Security (In Progress)

B.Sc. in Computer Science & Engineering

Diploma in Engineering — Instrumentation & Process Control Technology

Skills

Offensive Security

Defensive Security

Programming & Scripting

Threat Intel & OSINT