Open to opportunities
Kaan Dedeoğlu

Kaan Dedeoğlu

Computer Engineering graduate working full time on offensive application security. Hunts vulnerabilities through HackerOne — highest severity validated to date Critical, CVSS 9.3 — and builds the tooling and methodology behind that work. Backed by systems and networking internships and an IEEE-published research project.

HackerOne LinkedIn contact@kaandedeoglu.com
01 Education
BSc in Computer Engineering
Sep 2020 — Jun 2025
Eskişehir Technical University, Turkey — Language of Instruction: English
Prof. Dr. Fuat Sezgin Fen Lisesi
Sep 2016 — Jun 2020
Science High School — Silivri, Istanbul, Turkey
02 Experience
Independent Security Researcher
Jul 2025 — Present
HackerOne — @dedephus — Remote
  • Highest severity validated to date: Critical, CVSS 9.3
  • Reported 45 vulnerabilities across 12 bug bounty programs since April 2026; first bounty awarded in August 2026.
  • Program names and technical detail stay out of public writing until the vendor discloses the report — every finding to date is still under coordinated disclosure.
  • Built and maintains the-grind, a private research platform: ~1,150 commits, 25 hunting modules, ~10,500 lines of methodology, and a 14,617-report corpus mined for recurring vulnerability patterns.
  • Reads open-source codebases for authorization gaps and unguarded internal clients, then proves each candidate with a working end-to-end PoC on a local deployment before writing it up.
  • Ramped up full time from July 2025 — web application security fundamentals, systematic study of disclosed HackerOne reports and public vulnerability research, and a repeatable testing methodology — before the first submission in April 2026.
IT Systems Intern
Oct — Dec 2024
Eskişehir Technical University — IT Department, Systems & Networking
  • Worked in a team of three interns to install and configure DSpace 8 for the university’s digital library. Installed Java 17, Maven, Ant, PostgreSQL, and Apache Solr on an Ubuntu 22.04 VM provisioned by the IT staff.
  • Set up the PostgreSQL database: created a dedicated DSpace user, configured connection security (pg_hba.conf, MD5 auth), and enabled the pgcrypto extension for UUID support.
  • Configured Apache Solr cores for DSpace search, integrated MaxMind GeoIP for usage statistics, and ran the application as a Spring Boot JAR with custom properties and logging.
  • Configured HTTPS access through Apache HTTPD as a reverse proxy with a Let’s Encrypt certificate, and set up cron jobs for daily indexing, media filtering, and checksum verification.
IT Systems Intern
Jul — Aug 2024
Creentech — Istanbul, Turkey — Systems & Network Department
  • Installed Debian from scratch and practiced daily Linux administration: user management, file permissions, sudo configuration, package management with APT, and service control with systemctl.
  • Wrote basic Bash scripts, set up cron jobs for scheduled tasks, and learned process management, disk usage monitoring, and text processing tools (grep, awk, find).
  • Assisted in configuring Fortinet equipment alongside the network team: FortiGate firewall policies, VLAN setup, static routing, web filtering, and AP/switch integration.
  • Observed production monitoring (Grafana, Zabbix), virtualization platforms (VirtualBox, VMware, Nutanix), and Active Directory management. Toured Casper Ness Data Center to study physical infrastructure.
03 Training & Development
Garanti BBVA Technology Security Academy
Oct 2023 — Feb 2024
Enterprise Technology & Cybersecurity Training Program — Patika.dev
  • Top 20 of 3,600 applicants — 450 admitted, narrowed to 20
  • Intensive program covering Linux internals, network protocols, and enterprise application security.
  • Practiced threat modeling, access control design, and secure architecture review on real-world enterprise systems.
04 Certifications
Wiz
Bug Bounty Masterclass
Apr 2026
OWASP Top 10 Web App Security Bug Bounty
Udemy
Sıfırdan Bug Bounty ve Web Uygulama Güvenliği
Jul 2025
Web App Security OWASP Top 10
Cisco
NDG Linux Unhatched
Feb 2025
Linux
Cisco
Introduction to Cybersecurity
Jan 2025
Cybersecurity
TryHackMe
Pre Security
Mar 2024
Network Fundamentals Linux Fundamentals
TryHackMe
Introduction to Cyber Security
Feb 2024
Cybersecurity
Garanti BBVA Teknoloji
Patika.dev & Garanti BBVA Güvenlik Akademisi
Dec 2023
App Security Linux Networking
05 Projects
OSTEODEEP — AI-Driven Bone Health Assessment with Chatbot Integration using X-rays
Jan 2024 — Jun 2025
Graduation Thesis — Eskişehir Technical University
IEEE Published TÜBİTAK 2209-A Funded
IEEE Xplore GitHub
06 Technical Skills
Security
Web App Security OWASP Top 10 IDOR Auth Flaws SSRF
Tools
Burp Suite Caido Linux CLI HTTP Debugging
Systems
Linux Sysadmin Networking PostgreSQL Apache Solr
Programming
Python Java Spring Boot Shell