Jan 2025 – Present · 1 yr 3 mos · Vantaa, Uusimaa, Finland

• I started Bountyy because I got tired of seeing the same vulnerabilities in the wild that I’d been finding in bug bounties for years.
• 130+ confirmed rewards. Published CVEs. 7 years breaking into things professionally before anyone gave me permission to.
• At some point you stop asking why companies keep getting breached and start doing something about it.
• Bountyy is offensive security that actually works. We find what attackers find – before they do. Web and API pentesting, vulnerability research, red team engagements. No templates. No checkbox security.
• Real bugs. Real impact. Real fixes.
• If your team builds software and ships it to the internet, we should talk.

Jan 2024 – Apr 2025 · 1 yr 3 mos · Helsinki Metropolitan Area

• Application Security & DevSecOps
• DORA Compliance & Regulatory Alignment
• Threat Modeling & Risk Management
• Secure SDLC & Code Reviews
• Cloud & API Security
• Penetration Testing & Vulnerability Management

Dec 2022 – Jan 2024 · 1 yr 1 mo

• Penetration testing
• OSINT
• Red Team
• Social Enginering
• Conducting security assessments through vulnerability testing and risk analysis
• Performing both internal and external security audits

Nov 2019 – Nov 2022 · 3 yrs

• Penetration testing
• Conducting security assessments through vulnerability testing and risk analysis
• Performing both internal and external security audits

Apr 2019 – Jul 2019 · 3 mos · Espoo, Southern Finland, Finland

• Security incident response team training
• Purple Team & kill chain defenses
• Defeating advanced adversaries
• Penetration testing
• Spear phishing
• Social engineering
• Assist with the development of incident response plans, workflows, and SOPs
• Decipher attack motivations and techniques by correlating threat data from various sources to complete a comprehensive picture of potential cyber-attacks
• Deploy and maintain security sensors and tools
• Monitor security sensors and review logs to identify intrusions
• Use high-level scripting/programming language to extract, de-obfuscate, or otherwise manipulate malware related data
• Review vulnerabilities and track resolution
• Review and process threat intel reports
• Develop and implement detection use cases
• Develop and implement IDS signatures
• Develop and implement threat intelligence data
• Assist with incident response efforts
• Create and brief customer reports
• Perform customer security assessments

Jan 2019 – Present · 7 yrs 3 mos

• Discovery and exploitation of security vulnerabilities through private and public bug bounty programs (HackerOne, Intigriti, Bugcrowd).

Jan 2019 – Apr 2019 · 3 mos · Pasila

• Conducting security assessments through vulnerability testing and risk analysis
• Performing internal security audits
• Analyzing security breaches to identify the root cause
• Continuously updating the company’s incident response and disaster recovery plans
• Verifying the security of third-party vendors and collaborating with them to meet security requirements

Jan 2018 – Jan 2019 · 1 yr · Helsinki

• Managing information technology and computer systems
• Controlling and evaluating IT and electronic data operations
• Plan, organize, control and evaluate IT and electronic data operations
• Design, develop, implement and coordinate systems, policies and procedures
• Ensure security of data, network access and backup systems
• Act in alignment with user needs and system functionality to contribute to organizational policy
• Identify problematic areas and implement strategic solutions in time
• Audit systems and assess their outcomes
• Preserve assets, information security and control structures
• Monitoring security access
• Conducting security assessments through vulnerability testing and risk analysis
• Performing both internal and external security audits
• Analyzing security breaches to identify the root cause
• Continuously updating the company’s incident response and disaster recovery plans
• Verifying the security of third-party vendors and collaborating with them to meet security requirements