Alyssa Herrera
Security Researcher at Self-employed
California, United States
Summary
👤
Senior🎓
Top SchoolAlyssa Herrera is a seasoned web application security researcher with nine years of experience in offensive testing, exploit development, and security auditing for both commercial and government targets. She has led application security programs at Zoom, contributed to high-stakes DoD offensive assessments, and earned recognition on multiple bug bounty platforms including HackerOne and Synack. Comfortable across server, cloud, and front-end attack surfaces, she pairs practical exploit work (notably SSRF research) with developer-focused remediation guidance and threat-centric GRC thinking. As a self-directed learner proficient in Bash, Python, and PHP, she frequently explores emerging company technologies to map novel vulnerability vectors. Based in California, Alyssa blends hands-on red-team tactics with mentoring and community engagement from roles such as Bugcrowd Ambassador and independent consultant.
9 years of coding experience
2 years of employment as a software developer
GED, Highschool Equivalent, GED, Highschool Equivalent at Santa Rosa Junior College7-8, 7-8 at Rincon Valley Charter School
English, Danish, Spanish, nahuatl languages
Github Skills (13)
image-gallery4
issue-tracking4
cms4
smarty4
jquery3
php3
javascript3
composer3
nexus3
mysql2
security2
pentesting2
web-performance1
Programming languages (2)
Github contributions (5)
Alyssa-o-Herrera/Pentest-Resources
Nov 2018 - Nov 2018
Contributions:21 commits, 18 pushes in 1 day
Alyssa-o-Herrera/Mil-Domains
May 2017 - Mar 2018
Contributions:3 PRs, 16 pushes, 1 branch in 10 months
milbugbountysecuritysubdomainspentesting
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.