Profile
- Name
- Yuta Morioka (森岡 優太)
- Handle
- morioka12 (@scgajge12)
- Birthplace
- Kanagawa, Japan
- Position
- Security Engineer · Business Development (BizDev)
- Specialty
- Product Security · Offensive Security
- Practice
- Bug Bounty Hunter (since 2020)
- Community
- AWS Community Builder — Security (since 2024)
15+
CVE IDs Disclosed
2
Books Published
6th
Intigriti Peak · Feb.2024
20+
Talks & Lectures
Work Experience
Future
Future · Aspiration
Product Security Engineer
Enterprise / Product Company (PSIRT · Security Team)
- Product Security Engineering
- PSIRT · Vulnerability Coordination
- In-house Security Team Operations
Present
Apr.2025 – present
Security Engineer · BizDev
Cyber Security Vendor x2
- Business Development (Professional Services, Product)
- Security Consulting (DevSecOps / IR Support, Education)
- Security Advisory (External Advisor)
Past
May.2023 – Mar.2025 (Full-time / Part-time)
Security Engineer・Pentester
- Web Penetration Test
- Source Code Assessment
- LLM Security Assessment
Jul.2020 – Apr.2023 (Long-term Internship)
Security Engineer・Assessor
- Vulnerability Assessment (Web, Cloud, Platform)
- Launched a New Service (Cloud Security Assessment)
- Technical Blog Writing
Consulting Track Record
- DevSecOps maturity uplift & process improvement
- Security guideline refinement & standardization
- Security strategy & initiative roadmap planning
- Incident response support & advisory
- Security training delivery & internal enablement
- Sounding-board sessions for day-to-day security operations
Education
Apr.2020 – Mar.2024
Department of Information Security
Research theme: “Current Issues and Solutions Regarding AWS WAF”
Books
2026 (Forthcoming · July)
An introductory book on Bug Bounty / Bug Hunting
Publication · JP — Title & venue to be announced.
Press
Levtech LAB · Interview
The Hope of the Bug Hunter World: Why I Tackle Bug Bounty and Their True Appeal
Interests
Now · Recent Focus
- Software Supply Chain Security
- Cloud Breach
- Security for AI
- MCP & Skills Security
- Incident Response
- DevSecOps · Shift Left
Tech Skills
Focus Areas
Web Application Security
Cloud Security (AWS)
Offensive Security
Vulnerability Research
Source Code Assessment
LLM Security Assessment
Programming Languages
Go
Python
TypeScript
JavaScript
Ruby
PHP
C
Cloud · AWS
AWS
S3
EC2
Lambda
GuardDuty
WAF
Bedrock
Tooling
Claude Code
Caido
Nuclei
Original CLI Tools
Qualifications
2022
AWS Certified Solutions Architect – Associate (AWS SAA)
2021
AWS Certified Cloud Practitioner (AWS CLF)
2018
Information Technology Passport Examination (IPA FE)
Links
Primary
Talks & Profile
Last updated: