CSE student working in the gap between how systems are built and how they break. Days go into malware samples, Ghidra disassembly and SIEM pipelines. Nights go into CTFs and bug bounty hunting. Six organizations have acknowledged my disclosures so far.
| Focus | Malware analysis · Reverse engineering · SOC operations · AppSec |
| Studying | SC-500 Cloud and AI Security Engineer Associate (Microsoft) |
| Practising on | TryHackMe · LetsDefend · Hack The Box |
| CTF team | Diamond_Dogs |
| Ask me about | Ghidra, SIEM architecture, deobfuscation, CTFs |
| Seeking | SOC Analyst · Penetration Tester |
| ORGANIZATION | OUTCOME |
|---|---|
| NFL | [+] Security Hall of Fame |
| Philips | [+] Security Hall of Fame |
| IBM | [+] Security Hall of Fame |
| United Nations | [~] Triaged — listing pending |
| World Health Organization | [~] Triaged — listing pending |
| CERT-In | [~] Triaged — listing pending |
6 disclosures accepted · coordinated disclosure only · no unauthorized testing
[ LANGUAGES ]
[ TOOLING ]
| DOMAIN | WHAT I ACTUALLY DO |
|---|---|
| Malware Analysis / RE | Static & dynamic analysis, deobfuscation, disassembly in Ghidra, IOC extraction |
| Security Operations | SIEM & EDR tuning, log analysis, alert triage, incident response |
| Application Security | OWASP Top 10 assessment, web & API vulnerability hunting |
| Offensive Security | Web/API pentesting, phishing simulation, social engineering |
Security Intern — BytesEncrypt
Built an end-to-end blue-team training platform on Node.js and AWS, and authored 40–50 hands-on labs covering threat detection, log analysis and incident response.
Technical Lead — ZeroCrypt, Cybersecurity Club
Architected distributed lab infrastructure with Docker and AWS for attack simulations. Ran hands-on workshops for 40+ students.
Security Consultant — Freelance
Found and reported critical and high-severity vulnerabilities across SaaS applications, mapped to the OWASP Top 10.
|
Technical teardowns of live malware samples, phishing kits and scam infrastructure. Ships IOCs, reverse-engineering notes and de-obfuscated payloads for each case.
|
Static and dynamic analysis of an advanced Android spyware sample that fakes an SBI login page for credential theft while a hidden VpnService silently intercepts all device traffic.
|
|
Breakdown of the malware behind the September 2025 NPM compromise that hit
|
A cloud-native SIEM written in Java and Spring Boot that ingests AWS CloudTrail logs and raises real-time detections against them.
|
|
A hardened Active Directory build simulating a 1000+ user enterprise on a segregated virtual network, running Windows Server 2019.
|
Power BI dashboard backed by a Python statistical risk-scoring engine, surfacing insider threats from user behaviour logs.
|
Also in the repo: Wazuh SOC Lab · SOC Analyst Portfolio · not-strangers — graph-based payment abuse detection · Secure Code Review Handbook · Phishing Simulator · TryHackMe Walkthroughs · CTF Trophy Case
In progress —
SC-500 Cloud and AI Security Engineer Associate (Microsoft)
❯ Hack The Box
| CERTIFICATION | STATUS |
|---|---|
| Certified Defensive Security Analyst (CDSA) | [+] earned |
| Certified Junior Cybersecurity Associate (CJCA) | [+] earned |
❯ TryHackMe
| LEARNING PATH | STATUS |
|---|---|
| SOC Level 1 | [+] completed |
| Jr Penetration Tester | [+] completed |
| Cyber Security 101 | [+] completed |
| Web Fundamentals | [+] completed |
❯ LetsDefend
| CERTIFICATE / BADGE | VERIFY |
|---|---|
| SOC Analyst Fundamentals | verify |
| Malware Analysis | verify |
| Web Attack Detection and Analysis | verify |
| Programming for Cybersecurity | verify |
| Non Stop — badge | verify |
| Hunter II — badge | verify |
| Hunter — badge | verify |
❯ (ISC)² · NPTEL · Google
| CERTIFICATION | ISSUER |
|---|---|
| Certified in Cybersecurity (CC) | (ISC)² |
| Network Security | NPTEL — IIT Bombay |
| Google Cybersecurity Professional Certificate |
I publish deep-dives on malware analysis, reverse engineering, and unpacking heavily obfuscated code. My write-up on Chrome zero-day exploitation has crossed 6,000+ reads.
