Daniel Min
Principal Offensive Security Engineer at HackerOne
United States
Summary
🤩
Rockstar🎓
Top SchoolDaniel Min is a Principal Offensive Security Engineer with seven years of hands-on experience leading red team, penetration testing, and security engineering efforts across enterprise and cloud environments. He blends technical leadership with deep offensive chops—authoring CVEs, contributing Windows-focused offensive tooling and exploit demos on GitHub, and holding OSWE/OSCE/OSCP certifications. Daniel has driven security automation at scale, from vulnerability triage and SBOM generation to custom attack tooling and evasive exploit development, and has led adversary simulation programs at firms like Unqork, Optiv, and SS&C. He also contributes publicly as an elite HackTheBox practitioner and active HackerOne researcher, demonstrating a continual focus on practical research and responsible disclosure. A former military intelligence sergeant, he brings disciplined operational tradecraft and a knack for translating complex attack scenarios into actionable remediation guidance.
7 years of coding experience
1 year of employment as a software developer
Master of Science IT Auditing and Cyber Security, Master of Science IT Auditing and Cyber Security at Fox School of Business at Temple University
English, Korean
Stackoverflow
1reputation
81reached
0answers
1question
Github Skills (13)
tokenize10
tokenizer10
penetration-testing10
ws-api10
reverse-engineering10
winapi10
csharp10
python10
wp-api10
manipulation10
dotnet-core10
security10
unity-game-engine6
Programming languages (5)
Github contributions (5)
bigb0sss/RedTeam-OffensiveSecurity
Mar 2020 - Nov 2022
Tools & Interesting Things for RedTeam Ops
Role in this project:
Security Engineer
Security EngineerContributions:1 review, 308 commits, 6 PRs in 2 years 8 months
Contributions summary:Daniel contributed significantly to the repository by writing multiple Python scripts for Windows security operations. The user created scripts demonstrating various WinAPI functions, including message box creation, process manipulation (killing, creating), token manipulation (obtaining, checking privileges, adjusting), and DNS cache inspection. Furthermore, the user implemented a C# program that enumerates system information, including hostname, network interfaces, user info, and local admin information.
redteamopsinteresting
bigb0sss/ASM_Learning
May 2020 - Apr 2021
Contributions:151 commits, 149 pushes, 1 branch in 11 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.