01 · who_i_am
ABOUT ME
Supervised, hands-on exposure to penetration testing on real systems sits alongside my day-to-day SOC work — backed by application-security research built for Tech Utsav, Tietoevry's biannual innovation challenge, covering the OWASP Top 10, an ML-based sensitive-data-detection engine, and a Python security-automation tool. I'm comfortable working across detection, investigation, and remediation, with a builder's habit of documenting root cause and fix for every finding.
With a B.Tech in Computer Science from CGC Landran and a diploma from the Centre for Bioinformatics, I've completed hands-on training through Udemy and PG-Technology, and put that training to work through Tech Utsav — most recently chaining 13 vulnerabilities across a self-built e-commerce app and shipping a Chrome extension that catches sensitive-data leaks with up to 98.5% precision and recall.
2+
yrs_soc_ops
13
vulns_fixed
98.5%
ml_precision
7
certs
02 · what_i_work_with
CORE SKILLS
security_operations
SOC Monitoring & TriageIncident ResponseThreat Detection
SOP-Driven InvestigationAlert EscalationAudit & Compliance Support
security_tooling
SIEMEDREmail Security / Anti-PhishingTicketing & ITSM
application_and_web_security
OWASP Top 10SQL InjectionXSSCSRF
IDORSSRFBroken Access ControlInsecure File Upload
Vulnerability Assessment & Remediation
programming_and_automation
PythonFlaskFastAPISQL
Regex-Based Detection RulesML (scikit-learn, TF-IDF, LogReg)Git / GitHub
additional
C++HTMLCSSJavaScript
Chrome Extension DevWindows
03 · where_ive_worked
EXPERIENCE_
Sep 2024 – Present · India
Security Analyst — Tietoevry India Pvt Ltd
- Monitor and triage security events and alerts on a continuous basis, following documented SOPs and runbooks to identify, investigate, and escalate potential threats.
- Investigate flagged incidents using SIEM and endpoint detection tooling, correlating log data across sources to assess severity, scope, and likely root cause before escalation.
- Review and action email-security alerts, coordinating with the wider security team on remediation of phishing and suspicious-message reports.
- Log, track, and close incident tickets through ITSM/ticketing tooling, maintaining clear documentation to support audit and compliance reviews.
- Gained supervised, hands-on exposure to penetration testing on live systems, assisting with vulnerability identification and write-ups alongside senior testers.
Aug 2024 – Sep 2024 · India
NOC Engineer — Tietoevry India Pvt Ltd
- Completed initial onboarding as a NOC Engineer, monitoring network and device health alerts and following standard operating procedures to identify and escalate outages.
- Logged and tracked incidents through ticketing tools, coordinating with site and infrastructure teams to ensure timely acknowledgement and resolution.
- Built foundational alert-triage and escalation discipline that carried directly into the Security Analyst role that followed.
Feb 1 – May 30, 2023 · Punjab, India
Software Development Intern — Pgtech
- Developed and maintained web application features using Node.js, React.js, Express.js, and MongoDB.
Mar – Jun 2022 · Mohali, India
Software Development Intern — Persistent
- Learned and applied OOP concepts and JavaScript programming; built backend fundamentals with Node.js and MongoDB.
Feb 2022 – Aug 2024
Freelance Usability Tester — UserTesting.com
- Complete paid usability and feedback tests evaluating websites and applications, providing structured, detailed feedback under platform confidentiality terms.
- Completed 25+ tests to date, maintaining a consistent quality/completion record.
04 · what_ive_built_and_broken
TECH UTSAV PROJECTS
Fruit-Store-Pentest
- Designed and built a complete Flask e-commerce application, then independently introduced and exploited 13 real vulnerability instances spanning 10+ OWASP Top 10 categories — SQL injection, stored/reflected XSS, IDOR, CSRF, SSRF, broken access control, insecure file upload, and weak password hashing.
- Chained a mass-assignment privilege-escalation flaw with an admin-only SSRF endpoint to demonstrate a full multi-step compromise path from a low-privilege account, mirroring a real-world attack chain.
- Remediated every finding on a parallel patched branch and documented root cause, proof-of-concept, CWE classification, and fix for each vulnerability.
Sensitive-Data-Guard
- Built a Chrome extension and FastAPI backend that detects sensitive-data disclosure in real time across web forms and chat platforms (WhatsApp Web, LinkedIn messaging), using a hybrid rule-based and machine-learning pipeline.
- Trained and iterated TF-IDF + Logistic Regression classifiers across 15 rounds of dataset and model refinement, reaching up to 98.5% precision / 98.5% recall on a locked regression-test set.
- Integrated Google Safe Browsing and AbuseIPDB threat-intelligence APIs to assess site and IP reputation before flagging sensitive input.
NOC Auto-Responder
- Built a Python automation tool that monitors a NOC mailbox over IMAP, parses device-down alerts, resolves the affected site's manager contacts and location, and enriches each incident with live weather data.
- Integrated Google Gemini to draft professional incident notifications, with a guaranteed deterministic template fallback so a notification is never lost to an AI failure.
05 · credentials
CERTIFICATIONS & TRAINING
2026
Ethical Hacker
Cisco Networking Academy
2026
Cybersecurity & Cloud Fundamentals
Fortinet Training Institute
2026
Introduction to Next-Gen Firewall
Fortinet Training Institute
May 2024
Python: Master Programming and Development with 15 Projects
Udemy
May 2024
Web Development Masterclass
Udemy
2022
Martian Internship Program
Persistent
Feb – May 2023
Python Programming Training
PG-Technology Pvt Ltd
06 · get_in_touch