Headline

Security Consultant at Payatu | OSCP+ | OSCP

About

As a highly productive and self-motivated professional with a passion for security analyst with a strong interest in web hacking and penetration testing, I bring 1 year of experience in conducting comprehensive testing and vulnerability assessments. My expertise lies in identifying and addressing weaknesses in websites and networks to ensure the highest levels of security. Throughout my career, I have completed internships with four startup companies, where I gained extensive knowledge in areas such as ISO27001, VAPT, WAPT, and networking, among others. In addition to my hands-on experience, I hold a certification in cybersecurity as an eJPT (eLearnSecurity Junior Penetration Tester). I am dedicated to staying up-to-date with the latest industry trends and techniques and am always eager to expand my knowledge and skills. With a strong work ethic and a passion for excellence, I am confident in my ability to make a valuable contribution to any organization in need of a skilled and driven security analyst.

Location

Pune Division

AI stack

claude

codex

cursor

Work experience

Security Consultant at Payatu, May 2026 - Present · 3 mos, Pune City

Associate Security Consultant at Payatu, Dec 2024 - May 2026 · 1 yr 6 mos, Pune District

Security Engineer at SECUREU, Mar 2024 - Dec 2024 · 10 mos, Bengaluru, Karnataka, India, Configured and deployed various vulnerable labs on AWS, including CloudGoat and custom setups, to strengthen practical skills in cloud security. • Documented a detailed AWS penetration testing framework, resulting in the identification and remediation of 5+ vulnerabilities, ensuring enhanced security and safeguarding sensitive customer data. • Communicated directly with clients to gather requirements, ensuring their needs were met and they were satisfied with the security services provided. • Performed server hardening for clients, enhancing system security by ensuring all configurations were up-to-date and in line with best practices. • Created and designed challenges for the intern hiring process, effectively assessing candidates’ skills and suitability for cybersecurity roles

Security Engineer Intern at SECUREU, Jun 2023 - Mar 2024 · 10 mos, Patna, Bihar, India, • Executed API penetration testing, successfully identifying and mitigating 21 high-level vulnerabilities, including issues such as Broken Object Level Authorization (BOLA), Broken Function Level Authorization (BFLA), and mass assignment. • Mastered data loss prevention principles and implemented an automated PowerShell script for Windows environments, reducing data security incidents by 40%. • Researched and identified 13 Linux-specific Data Loss Prevention (DLP) restrictions • Developed a sophisticated Bash script to apply and revert these restrictions on Linux systems, showcasing proficiency in scripting and system security. • Implemented and configured various vulnerable labs on AWS, including CloudGoat and custom labs, to fortify practical skills in cloud security. • Acquired knowledge in AWS penetration testing, contributing to a robust understanding of cloud security best practices.

Security Analyst at Newton's Apple, Dec 2022 - Jan 2023 · 2 mos, Pune, Maharashtra, India, • Conducted web application and API penetration testing on various web applications, identifying and evaluating vulnerabilities to ensure the security of client systems and data. • Performed vulnerability assessments and penetration testing on multiple IPs, providing clients with comprehensive and actionable reports on identified vulnerabilities and recommended remediation actions. • Conducted Pentesting and prepared reports for applications used in mobile devices, such as Android and iOS operating systems • Design/Improvement and Implementation of ISMS in compliance with ISO 27001 • Review the existing corporate policies and write new Policies for the organization

Cyber Security Intern at CrowdOverflow, Aug 2022 - Oct 2022 · 3 mos, Pune, Maharashtra, India, • Scanned websites for malware and security risks daily for 3 months vulnerabilities in systems • Investigated 10+ application for security flaws • Created comprehensive security reports • Worked on tools like Nikto, Burpsuite, Httpx, Nuclei, Sudomy, Waybackurls etc.

Penetration Testing Intern at Virtually Testing Foundation, Oct 2021 - Dec 2021 · 3 mos, California, United States, • Conducted scans on ten labs with various security tools to identify vulnerabilities in systems • Analyzed scan results and provide remediation for all ten labs • Performed penetration tests on other five systems to simulate real-world attacks and assess security risks • Operated on tools like nikto, burpsuite, nuclei, etc.

Education

Bachelor of Technology - BTech, Information Technology, G.H. Raisoni Societys, College of Engineering and Management,Pune

High School Diploma, Information Technology, Government Polytechnic college

Public links

github: https://github.com/BlackstormCoder