Christian Xiang

Introduction

With 3 years of hands-on experience as a pentester through my work-study program at Wancore and Cyna, I've built a deep technical foundation in offensive security. I don't just find vulnerabilities. I understand why they exist, how they're exploited in the real world, and what it actually takes to fix them. That attacker mindset is what sets me apart. Over the years I've developed hands-on expertise across the following domains: - Web application & API testing - Active Directory exploitation & IAM misconfigurations - Network infrastructure assessments - Bug bounty research (YesWeHack) - Vulnerability documentation & remediation reporting And also theses expertise is backed by industry-recognized certifications : - PNPT (Practical Network Penetration Tester) — Full penetration testing methodology, from reconnaissance to reporting, on real-world network environments - PJPT (Practical Junior Penetration Tester) — Core penetration testing skills across internal network assessments - CRTP (Certified Red Team Professional) — Active Directory attacks and red team operations in enterprise Windows environments - EJPTv2 (eLearnSecurity Junior Penetration Tester) — Fundamental offensive security concepts, network exploitation and web application testing Beyond the Technical Side, I've always thrived at the intersection of security and people. I communicate complex findings clearly, whether it's a detailed technical report for a security engineer or an executive summary for a CISO. I adapt, I listen, and I make sure my work actually gets used, not just filed away. I want to keep growing in offensive security, pushing my technical skills further and taking on increasingly complex challenges. Along the way, I've naturally developed an interest in the risk and governance side of cybersecurity not as a pivot, but because it genuinely complements the technical work. When you spend time finding what breaks, you start thinking about why it breaks, what it costs, and how organizations should prioritize fixing it. That broader perspective is something I want to keep building on. Trilingual (French, English, Mandarin), genuinely curious and self-directed. I don't wait to be told what to learn next. I seek out challenges because that's where growth happens. If you're looking for someone who combines deep technical credibility with the maturity to engage at a strategic level, let's connect.

Liens