Aleksandr Morozov
About Aleksandr Morozov
Aleksandr Morozov is a security researcher with extensive experience in penetration testing. He currently serves as the Head of the Penetration Testing Department at Positive Technologies and has been involved in security research at HackerOne since 2016.
Work at HackerOne
Aleksandr Morozov has been a Security Researcher at HackerOne since 2016. In this role, he focuses on identifying vulnerabilities and enhancing security measures for various applications. His expertise in penetration testing contributes to HackerOne's mission of improving security for organizations through responsible disclosure of vulnerabilities.
Current Role at Positive Technologies
Since 2020, Aleksandr Morozov has served as the Head of the Penetration Testing Department at Positive Technologies. He leads a team dedicated to conducting thorough penetration tests, ensuring the security of clients' systems. His leadership role builds on his previous experience as Head of the Penetration Testing Group from 2018 to 2020 and as a Penetration Tester since 2016.
Education and Expertise
Aleksandr Morozov earned a Bachelor's degree in Maths and Computer Science from Vladimir State University, studying from 2009 to 2014. His educational background provides a strong foundation for his work in security research and penetration testing. He has developed extensive expertise in red-team penetration testing and web application security assessments.
Professional Background
Before focusing on penetration testing, Aleksandr Morozov worked as a Software Developer at iBuildApp from 2013 to 2016. He has experience as a full-stack web developer and .NET developer, contributing to international projects. This background has informed his transition into security roles, where he applies his development knowledge to identify vulnerabilities.
Technical Skills and Tools
Aleksandr Morozov specializes in various aspects of penetration testing, including blackbox and whitebox methodologies. He utilizes tools such as Burp Suite Pro, Acunetix, and SQLMap for web application security assessments. His skills also extend to protocol reversing with tools like Wireshark and Burp Suite, and he has conducted WLAN security checks.