Headline

Cybersecurity Analyst | VAPT & OSINT Specialist | Nessus · Burp Suite · Metasploit · Kali Linux | Protecting Digital Assets from Real-World Threats

About

Cybersecurity Analyst with hands-on experience in Vulnerability Assessment & Penetration Testing (VAPT) and Open-Source Intelligence (OSINT), gained through real-world client engagements at Digit Defence. During my time there, I uncovered 50+ vulnerabilities across live web targets — including a CVSS 10.0 critical flaw (PHP Unsupported Version) — and mapped Facebook.com's external attack surface using Maltego, linking 459 entities and 805 connections across subdomains, DNS records, and email infrastructure. I also analyzed 500+ network packets in Wireshark, intercepted 100+ HTTP/HTTPS requests via Burp Suite, and delivered prioritized remediation roadmaps that cut estimated critical risk exposure by 40%. My toolkit includes Nessus, Burp Suite, Metasploit, Nmap, Wireshark, Maltego, Kali Linux, Splunk, and ELK Stack. I stay current by tracking 20+ CVEs weekly, practicing on TryHackMe and Hack The Box, and documenting security research on Medium and GitHub. Certified in Cybersecurity by IIFIS, NASSCOM, and Skillogic — with additional training in AI-driven security threats. Open to roles in penetration testing, threat intelligence, SOC analysis, and incident response. Feel free to connect or reach out.

Location

Mumbai Metropolitan Region

Work experience

Cyber Security Analyst at Digit Defence, Jan 2025 - Jul 2025 · 7 mos, Bengaluru, Uncovered 50+ vulnerabilities on live targets using Nessus, including a CVSS 10.0 critical flaw recommended immediate patching and PHP upgrade. Detected XSS, CSRF, and SSL/TLS misconfigurations including SSLv3 usage and 4+ weak cipher suite deployments. Mapped Facebook.com's attack surface using Maltego, linking 459 entities and 805 connections across subdomains, DNS records, and email infrastructure. Exposed 6 authentication flaws and insecure session management issues by intercepting 100+ HTTP/HTTPS requests via Burp Suite. Detected 3 instances of unencrypted credential transmission across 500+ packets analysed in Wireshark. Delivered 2 prioritised remediation roadmaps (10+ action items), reducing critical risk exposure by 40%. Validated vulnerability exploitability through real-world attack simulations using Metasploit. Tracked 20+ emerging CVEs and OWASP Top 10 guidelines weekly to keep assessments aligned with current attack vectors.

Education

Bachelor of Technology - BTech, Electronics and Telecommunication, Dnyanshree Institute of Engineering and Technology

Bachelor of Technology - BTech, Electronics and Telecommunication, Dr. Babasaheb Ambedkar Technological University