Computer Science and Engineering graduate with a CGPA of 8.64. My core interests lie in cybersecurity, penetration testing, cryptography, and cloud security. I specialize in Vulnerability Assessment and Penetration Testing (VAPT), Ethical Hacking and Security Automation, with hands-on experience in red teaming, compliance auditing, cloud security and infrastructure hardening.

• Certified Ethical Hacker (CEH) – EC-Council
• CompTIA Security+
• Professional Certificate Program in Cybersecurity – Red Team – IIT Kanpur (Capstone Projects)
• AWS Certified Cloud Practitioner (CCP)
• Qualys Web Application Scanning Certification
• Cisco NetAcad: Networking Basics, Ethical Hacker, Packet Tracer, Endpoint Security
• NPTEL: Systems and Usable Security (Elite Silver)
• Postman API Fundamentals Student Expert
• TryHackMe Learning Paths: Jr Penetration Tester, Web Fundamentals

• Cloud Security Engineer - I | Insight (July 2026 – Present)
  Supporting enterprise security operations for an international client across IAM, anti-malware, email security, secure web workspace technologies and Zscaler. Investigating security tickets, troubleshooting access and connectivity issues, managing workflows through ServiceNow and supporting security controls aligned with Zero Trust principles.

• Summer Intern | Ernst & Young (EY) (May 2025 – July 2025)
  Designed GRC-Forge, a Dockerized compliance automation system for frameworks such as ISO 27001, SOC 2, HIPAA and GDPR. Developed a modular multi-stage pipeline to extract and analyze policy documentation, evaluate compliance alignment and generate actionable audit insights.

• Penetration Tester | VulnOS – WebFreakz Digitech (July 2025 – September 2025)
  Conducted penetration testing across simulated real-world environments, identifying and exploiting vulnerabilities in web applications and infrastructure. Performed VAPT, analyzed misconfigurations and CVEs, documented findings and recommended remediation measures to strengthen platform security.

• Security Analyst Intern | Conversia-AI (January 2025 – April 2025)
  Conducted VAPT across internal and client systems, performed manual security assessments, implemented IAM controls and strengthened AWS IAM security policies. Collaborated with DevOps teams to investigate incidents, mitigate vulnerabilities and improve overall security posture.

• Published 3 CVEs through responsible vulnerability research and disclosure:
  • CVE-2026-23842 - 7.5 High: Identified a denial-of-service vulnerability in ChatterBot caused by database connection pool exhaustion during concurrent get_response() calls. CVE-GHSA Disclosure Link
  • CVE-2026-27579 - 7.4 High: Identified a CORS misconfiguration in CollabPlatform that permits credentialed cross-origin requests from arbitrary origins, potentially exposing sensitive user account information. CVE-GHSA Disclosure Link
  • CVE-2026-44341 - 5.3 Medium: Identified an IDOR vulnerability in GoJobs that allows unauthenticated access to job details through manipulation of object identifiers due to missing authentication and authorization checks. CVE-GHSA Disclosure Link
• 27 GitHub Security Advisories (GHSAs): Identified and reported 27 vulnerabilities across multiple repositories, including 3 Critical, 8 High and 16 Moderate severity findings.
• Coordinated Vulnerability Disclosure: Reported additional high-impact vulnerabilities through responsible disclosure programs and bug bounty platforms.

• 📘 Publications & Research

  • Research Paper: “AI-Enhanced Differential Privacy” - IEEE Xplore, presented at ICIPTM-2026
  • Research Paper: “Refining ISO/IEC 27001 for AI Security” - Springer (LNEE Series), presented at ReDCySec-2025
  • Book Chapter: “Robotics and Cybersecurity Fundamentals” - CRC Press, Taylor & Francis (Scopus-Indexed) - Dec 2025
  • Book Chapter Accepted: “Hacking Generative Artificial Intelligence” - Bentham Publications - Oct 2025
  • Book Chapter Accepted: “IoT Security Challenges and Quantum Resistant Approaches” - Bentham Publications - Jan 2026

• ✍️ Cybersecurity Writer (Medium)
  Published cybersecurity research and technical writeups across 12+ Medium publications, including InfoSec WriteUps, covering VAPT, bug hunting, cryptography, and practical security research.

• 🏆 Hacknovate 5.0 Finalist
  Secured Top 10 (Offline Category) at Hacknovate 5.0 (May 2024) with Team API Alchemist at ABES IT, Ghaziabad.

• 🌐 TryHackMe Global Top 2%
  Ranked among the top global learners on TryHackMe for consistently solving red-team, exploitation, and attack simulation labs.

• Cybersecurity & VAPT: Ethical Hacking, App Scanning, Incident Response, Threat Intelligence
• Cloud Security: AWS, Azure, Terraform basics
• Programming: Java, Python, C, C++
• Scripting: Bash, PowerShell
• Database: MySQL, Oracle SQL
• Tools & Platforms: GitHub, Docker, Nessus, Acunetix
• Networking & Analysis: Network Security, Packet Tracing

• Cisco NetAcad: CCNA v7
• Microsoft Learn: SC-200, Linux Shell, GitHub
• SimpliLearn Training: CISM, CCSP, CompTIA Network+, Cybersecurity Essentials, Linux Training
• EC-Council CodeRed: Top 100 Interesting Bugs, IoT Security, Cloud Security, Web Forensics
• Forage Cybersecurity Job Simulations: Mastercard, Telstra, ANZ, AIG, TCS, PwC, Deloitte, Datacom, Commonwealth Bank
• AWS Educate: Getting Started with Security (AWS IAM)
• Udemy: Complete Ethical Hacking Bootcamp, ParrotOS Ethical Hacking Course

🚀 Let’s connect and collaborate on cybersecurity, cloud security, and security automation!