CPENT
Certified Penetration Testing Professional
- Issuer
- EC-Council
- Domain
- Advanced Penetration Testing
Cybersecurity Professional · Web & API Security · Penetration Testing
Hi, I'm
Sakil Ahamed Gayen
I help organizations identify, validate, and remediate security vulnerabilities across web applications and APIs through practical, evidence-driven security testing.
Web App + API — Q3 Assessment
Assessment report
Sprint 24 Security Review
Verified fixes
SG
BOLA on /api/orders remediated
Retest passed
SK
XSS in search — patched
Retest passed
Open findings
MR
Session fixation in auth flow
High3
JL
IDOR on document export
Critical5
ScopeTestReportVerify
Every engagement includes
Executive summary · PoC steps · Fix roadmap · 14-day retest
Deliverables4 of 4 ready
See what you get
- Years in offensive security
- 1.5+
- Years in offensive security
- Engagements delivered
- 10+
- Engagements delivered
- Critical & high findings reported
- 50+
- Critical & high findings reported
- Industries assessed
- 5+
- Industries assessed
Years of experience
1.5+Years of experience
Hello, I'm
Sakil Ahamed,
Cybersecurity Professional
Remote — engagements worldwide
I'm a cybersecurity professional specializing in web application security, API security, and penetration testing. I work at the intersection of technical security and business risk—finding vulnerabilities, validating their real-world impact, and turning security findings into clear, actionable remediation.
My approach is practical and evidence-driven: understand the attack surface, test beyond automated scans, validate what matters, and communicate risk clearly.
Whether it's strengthening an application, assessing an API, or helping a team understand its security posture, my goal is simple:
Find the weaknesses before they become business problems.
1.5+
Years in security
10+
Assessments delivered
60+
Findings reported
/Who I Am
Building Security, Breaking Assumptions
I'm Sakil Ahamed, a cybersecurity professional focused on web application security, API security, and penetration testing. I approach security from an attacker's perspective while keeping the focus on what matters to organizations—finding meaningful weaknesses, validating their impact, and helping teams build more resilient applications.
My experience spans enterprise cybersecurity and security analysis, supported by hands-on security testing, professional certifications, and continuous research across modern application and API security.
Professional Experience
Cyber Security Analyst
Tata Consultancy Services (TCS)
2025 — Present
Junior Security Analyst
Webhibe Technology
2025 Jan — Aug
Independent Security Research & VAPT
Independent / Freelance
Ongoing
/ Credentials
Certifications That Back My Expertise
Professional certifications that complement my hands-on experience in application, API, and cybersecurity testing.
2026
eWPT
eLearnSecurity Web Penetration Tester
- Issuer
- INE
- Domain
- Web Penetration Testing
eJPT
eLearnSecurity Junior Penetration Tester
- Issuer
- INE
- Domain
- Penetration Testing & Ethical Hacking
ACP
API Security Certified Professional
- Issuer
- APIsec University
- Domain
- API Security
More Certifications
I have earned multiple other certifications across cloud, security, and technology domains.
Continuously learning. Continuously building. Committed to excellence in cybersecurity.
/ Proven in Practice
Beyond Certifications. Proven Through Practice.
From competitive security challenges to real-world vulnerability research and client assessments, I apply security knowledge in practical environments where findings need to be validated, communicated, and acted upon.
01
TCS HackQuest
Cybersecurity CompetitionRecognized for performance in TCS HackQuest, a cybersecurity competition focused on practical security problem-solving and technical challenges.
TCS HackQuest — Qualified Participant
Corporate CTFTCS
02
Vulnerability Research
Real-World Vulnerability ResearchDiscovered and responsibly reported multiple security vulnerabilities across real-world platforms through authorized and responsible disclosure programs.
Responsible Disclosure
03
Freelance VAPT
10+ VAPT Assessments DeliveredCompleted 10+ penetration testing and vulnerability assessment projects for clients across different applications and environments, delivering practical findings, evidence, risk prioritization, and actionable remediation guidance.
10+VAPT Projects Delivered
/ SECURITY INSIGHTS
Research, Insights & Security Writeups
Practical perspectives on web application security, API security, penetration testing, vulnerability research, and the evolving cybersecurity landscape.
/ LET'S TALK SECURITY
Let's Find Out Where Your Security Stands.
Tell me about your application, API, or security requirements. Let's discuss the right testing approach and next steps.