Atharva Velhal profile photo 1 on Tal

Atharva Velhal

Student at ISB&M School of Technology - E&TC Student | Aspiring SOC Analyst | Cybersecurity | Log Analysis • Linux & Networking

Pune District

< 1 year of work experience

TryHackMe
Feb 20265 mosPresent

Identified and exploited OWASP Top 10 vulnerabilities — including SQL Injection, Cross-Site Scripting (XSS), broken authentication, insecure file upload, and IDOR — across 15+ TryHackMe rooms using Burp Suite as primary proxy. Executed full-scope recon and enumeration workflows using Nmap (service/version detection), Gobuster (directory brute-forcing), and Nikto (web vulnerability scanning) to establish footholds and escalate access.
Hack The Box
Jan 20266 mosPresent

Conducted penetration testing on 5+ HTB machines; exploited Telnet misconfiguration (Meow) for initial access and chained IDOR vulnerability with Linux capability abuse (cap_setuid) on Cap machine to achieve full privilege escalation. Performed digital forensics investigations using ExifTool to extract and analyse metadata artefacts, successfully reconstructing attacker timelines across 3 simulated incident scenarios. Documented complete attack chains — reconnaissance through post-exploitation — mapping all techniques to MITRE ATT&CK framework (TA0001, TA0004, TA0006) and produced structured penetration testing reports.

Education

Bachelor of Engineering - BE, Electronics and Telecommunication

ISB&M School of Technology - India

20225 yrs2027
Savitribai Phule Pune University

Bachelor of Technology - BTech, Electronics and telecommunication

Savitribai Phule Pune University

20233 yrs2026

Join Atharva and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Atharva Velhal on Tal

Headline

Student at ISB&M School of Technology - E&TC Student | Aspiring SOC Analyst | Cybersecurity | Log Analysis • Linux & Networking

About

Electronics & Telecommunication Engineer | Aspiring SOC Analyst | Cloud Security Enthusiast I bridge the gap between complex networking and proactive defense. Currently, I am focused on the intersection of SOC Operations and Cloud Infrastructure Security, ensuring that as businesses move to the cloud, their security posture moves with them. My approach is hands-on. I don’t just read about security; I lab it. From analyzing traffic in Wireshark and performing reconnaissance with Nmap, to hardening Linux (Ubuntu/Kali) environments and solving challenges on Hack The Box (Meow, Cap), I am constantly refining my ability to detect and mitigate threats. What I bring to the table: 🛡️ Defensive Mindset: Log analysis, SIEM fundamentals, and understanding the MITRE ATT&CK framework. ☁️ Cloud Security: Implementing IAM least-privilege, securing S3 buckets, and monitoring cloud-native logs. 🐧 Technical Toolkit: Proficient in Linux administration, Network Protocols, and Digital Forensics (ExifTool). I am driven by the challenge of outsmarting the adversary and am currently seeking opportunities to contribute to a high-performing Security Operations Center (SOC).

Location

Pune District

Work experience

Web Application Specialist at TryHackMe, Feb 2026 - Present · 5 mos, Identified and exploited OWASP Top 10 vulnerabilities — including SQL Injection, Cross-Site Scripting (XSS), broken authentication, insecure file upload, and IDOR — across 15+ TryHackMe rooms using Burp Suite as primary proxy. Executed full-scope recon and enumeration workflows using Nmap (service/version detection), Gobuster (directory brute-forcing), and Nikto (web vulnerability scanning) to establish footholds and escalate access.

Analysis Specialist at Hack The Box, Jan 2026 - Present · 6 mos, Conducted penetration testing on 5+ HTB machines; exploited Telnet misconfiguration (Meow) for initial access and chained IDOR vulnerability with Linux capability abuse (cap_setuid) on Cap machine to achieve full privilege escalation. Performed digital forensics investigations using ExifTool to extract and analyse metadata artefacts, successfully reconstructing attacker timelines across 3 simulated incident scenarios. Documented complete attack chains — reconnaissance through post-exploitation — mapping all techniques to MITRE ATT&CK framework (TA0001, TA0004, TA0006) and produced structured penetration testing reports.

Education

Bachelor of Engineering - BE, Electronics and Telecommunication, ISB&M School of Technology - India

Bachelor of Technology - BTech, Electronics and telecommunication, Savitribai Phule Pune University

Atharva Velhal - Web Application Specialist in Pune District | Tal