VAPT professional with hands-on web & API penetration testing experience across e-commerce, legal-tech, fintech, and SaaS environments. Skilled in OWASP Top 10 and OWASP API Security Top 10 identification, exploitation, and remediation reporting - with a research background in ML-assisted vulnerability detection from IIT Palakkad.
Custom Web Application Firewall (WAF) with rule-based detection for OWASP Top 10 attack patterns, including real-time event logging, blocked-IP tracking, and a threat-analytics dashboard for improved attack visibility.
End-to-end SIEM investigation in Splunk - detected LSASS credential dumping via LOLBins (rundll32.exe) using SPL on Sysmon Event logs (EventCode 10, 7, 3). Traced a full attack chain from fileless PowerShell malware (clr.dll) to C2 callback via notepad.exe.
CNN-based False Data Injection attack detector for Smart Grids - F1 score 0.91, 94.5% accuracy. End-to-end ML pipeline with conformity scoring and a Gradio interactive interface.
Network Security · Digital Forensics · AWS Cloud Practitioner · AWS Cloud Architect · Software Vulnerability Testing
1st place in CTF competitions at VIT University and NIIT. National Finalist at IIT Madras, AIT Pune, and IIIT Bhagalpur.
Completed 50+ labs focused on threat hunting, malware analysis, Active Directory, and network security.
Designed CTF challenges and organized cybersecurity events for the campus community.