Jubaer Alnazi Jabin, Developer in Singapore, Singapore
Jubaer is available for hire
Hire Jubaer

Jubaer Alnazi Jabin

Verified Expert  in Engineering

Security Engineer and Developer

Singapore, Singapore
Toptal Member Since
July 18, 2022

Jubaer, an OSCP specialist, holds a reputable position in information and cloud security. With 5+ years of experience, he discovered the Apple vulnerability (CVE-2023-23526) and identified vulnerabilities in 300+ companies like Apple, Grab, Google, Yahoo, Facebook, and Uber. Jubaer excels in HackerOne, writes insightful articles, and creates Python and Go tools. His expertise spans security compliance (GRC) and Web3 technologies, making him invaluable in securing data and systems.


TRS Forensics
Python, Web Security, Mobile Security, Wireless, Burp Suite, Ethical Hacking...
Social Engineering, Red Teaming, Bash Script, Docker, Security...
Web Security, Mobile Security, Wireless, Networks, Ethical Hacking, Linux...




Preferred Environment

PyCharm, Burp Suite, GitHub, Amazon Web Services (AWS), Docker, Web Security, Ethical Hacking

The most amazing...

...security vulnerability I've discovered was in Grab, where I hacked their payment system and ordered for free, thus earning a reward of $11,000 from them.

Work Experience

Penetration Test Lead

2021 - PRESENT
TRS Forensics
  • Delivered more than 100+ quality pentest projects on time.
  • Implemented different SOPs to ensure productivity in the team.
  • Increased the revenue of the company by scaling the pentest workflow.
  • Developed multiple tools to exploit vulnerabilities and satisfy clients' needs.
  • Managed top tech clients in Singapore to ensure the smooth delivery of the project.
Technologies: Python, Web Security, Mobile Security, Wireless, Burp Suite, Ethical Hacking, Bash Script, Docker, Security, Penetration Testing, MongoDB, OWASP, IT Security, Hacking, Cybersecurity, Vulnerability Assessment, DevSecOps, Database Security, Vulnerability Management

Offensive Security Specialist

2020 - 2021
  • Contributed to multiple pentest projects and consulted other teams about security.
  • Ensured a secure environment through numerous red team engagements.
  • Participated in various social engineering engagements to ensure employee security.
Technologies: Social Engineering, Red Teaming, Bash Script, Docker, Security, Penetration Testing, Web Security, Mobile Security, OWASP, IT Security, Hacking, Cybersecurity, Vulnerability Assessment, Database Security

Security Engineer

2019 - 2020
  • Ensured security for the in-house products by performing penetration tests.
  • Developed specific tools to help with security and monitoring.
  • Conducted security training sessions to educate employees about information security.
  • Triaged security vulnerabilities that were reported through the HackerOne program.
Technologies: Web Security, Mobile Security, Wireless, Networks, Ethical Hacking, Linux, Burp Suite, Bug Triage, Docker, Bash Script, Security, Penetration Testing, Amazon Web Services (AWS), OWASP, Cloud Security, IT Security, Hacking, System Administration, Cybersecurity, Threat Modeling, Vulnerability Assessment, DevSecOps, Database Security, Cloudflare

Bug Bounty Hunter

2017 - 2020
  • Reported more than 100+ vulnerabilities, and a good percentage were of high severity.
  • Ranked in the world's top 100 out of 100,000+ registered hackers in 2018.
  • Earned the Hacking the Hackers badge by reporting an issue to HackerOne.
Technologies: Web Security, Mobile Security, Network Security, Bash Script, Docker, Security, Penetration Testing, OWASP, IT Security, Hacking, Cybersecurity, Database Security, Cloudflare

SniffCon—Ultimate Recon Dashboard

Sniffcon has a comprehensive list of powerful online bug bounty tools to find security vulnerabilities. It is a platform where users can find heavy lifting tools that provide organized recon data, which is crucial during bug bounty and penetration tests.

Jbin Website Secret Scraper

Jbin gathers all the URLs from the website and exposes their secret data. It collects both URLs and JavaScript links to scrape secrets out of them. The new release also enables users to find a specific string in a page, run a custom regex, and generate an informative report.


A Python-based tool that helps users find reflected parameters with potential XSS or open redirection vulnerabilities. It scans for reflected parameters and shows some URLs with possible open redirect vulnerabilities. The user can also set the max thread to make the script faster.
2017 - 2020

Bachelor's Degree in Cybersecurity

Staffordshire University - Staffordshire, United Kingdom


Offensive Security Certified Professional (OSCP)





Penetration Testing, DevSecOps


Bash Script, Python, Python 3, JavaScript

Industry Expertise

Network Security, Cybersecurity


Burp Suite, Docker, Amazon Web Services (AWS), Linux


Database Security, MongoDB




Web Security, Mobile Security, Ethical Hacking, Bug Triage, OWASP, Security, Wireless, IT Security, Hacking, OSCP, Vulnerability Assessment, Cloudflare, Cloud Security, System Administration, Threat Modeling, Vulnerability Management, Coding, Red Teaming, Social Engineering, Networks

Collaboration That Works

How to Work with Toptal

Toptal matches you directly with global industry experts from our network in hours—not weeks or months.


Share your needs

Discuss your requirements and refine your scope in a call with a Toptal domain expert.

Choose your talent

Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.

Start your risk-free talent trial

Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.

Top talent is in high demand.

Start hiring