Lavish Singhal profile photo 1 on Tal

Lavish Singhal

Senior Cybersecurity Analyst @Deloitte | CEH v13 | ACP | Web, API & Cloud VAPT | Top 1% TryHackMe | Building AI-Automated Security Tools

Bhubaneswar

1+ year of work experience

Deloitte
Jul 20251 yrPresent

Bhubaneswar

• Execute comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across complex Web, API, and Cloud environments for enterprise-level clients. • Identify, exploit, and document critical security flaws, providing actionable remediation strategies and threat models to infrastructure and development teams. • Engineered and deployed a custom automated VAPT reporting solution. This utility seamlessly parses raw vulnerability data into standardized, client-ready documentation, drastically reducing manual reporting time and improving team efficiency. • Spearheading the integration of Agentic AI into offensive security workflows to intelligently automate vulnerability mapping against industry standards and dynamically generate comprehensive security test cases. • Continuously research emerging threat vectors and evaluate cutting-edge offensive security utilities, integrating high-impact solutions into standard penetration testing methodologies.

Education

Shivalik College of Engineering, Dehradun

Bachelor of Technology - BTech, Computer science and engineering

Shivalik College of Engineering, Dehradun

20214 yrs2025

Join Lavish and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Lavish Singhal on Tal

Headline

Senior Cybersecurity Analyst @Deloitte | CEH v13 | ACP | Web, API & Cloud VAPT | Top 1% TryHackMe | Building AI-Automated Security Tools

About

I am an offensive security professional and Senior Analyst at Deloitte, specializing in Web, API, and Cloud Vulnerability Assessment and Penetration Testing (VAPT). My approach to cybersecurity goes beyond simply identifying vulnerabilities—I am driven by building scalable solutions and automating complex security workflows. With a technical foundation backed by certifications like CEH v13 and APIsec Certified Practitioner (ACP), along with a global Top 1% ranking on TryHackMe, I spend my days deep in threat modeling, application security, and exploiting complex attack vectors to secure enterprise environments. Beyond manual penetration testing, I am deeply passionate about the intersection of cybersecurity and software development. I actively build custom automation tools—such as a bespoke client-side VAPT report generator utilizing HTML and JavaScript—and I am currently exploring Agentic AI to automate OWASP mapping and streamline dynamic test case generation. I believe the future of offensive security lies in leveraging AI to work smarter, faster, and more accurately. Technical Highlights: 🔹 Core Focus: Web & API VAPT, Cloud Security, Red Teaming, Security Automation 🔹 Certifications: CEH v13, ACP, Microsoft Azure, NASSCOM Cybersecurity 🔹 Achievements: Top 1% on TryHackMe Globally, Unstop Talent Award Winner Whether it's securing critical infrastructure, developing AI-driven security tools, or tackling the next complex vulnerability, I am always looking to push the boundaries of tech. Let's connect if you are passionate about offensive security, AI automation, or innovative problem-solving!

Location

Bhubaneswar

Work experience

Senior Analyst at Deloitte, Jul 2025 - Present · 1 yr, Bhubaneswar, • Execute comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across complex Web, API, and Cloud environments for enterprise-level clients. • Identify, exploit, and document critical security flaws, providing actionable remediation strategies and threat models to infrastructure and development teams. • Engineered and deployed a custom automated VAPT reporting solution. This utility seamlessly parses raw vulnerability data into standardized, client-ready documentation, drastically reducing manual reporting time and improving team efficiency. • Spearheading the integration of Agentic AI into offensive security workflows to intelligently automate vulnerability mapping against industry standards and dynamically generate comprehensive security test cases. • Continuously research emerging threat vectors and evaluate cutting-edge offensive security utilities, integrating high-impact solutions into standard penetration testing methodologies.

Education

Bachelor of Technology - BTech, Computer science and engineering, Shivalik College of Engineering, Dehradun