STUDENT CODE: AV123123202
Security consultant
ABOUT ME
A highly skilled Security Consultant with a robust background in penetration testing, red teaming, and
cybersecurity training, currently leveraging expertise at EY to enhance client security postures and lead
innovative security initiatives.
WORK EXPERIENCE
Security Consultant, EY, October 2023 - Present, Bengaluru, Karnataka, India
• Security consultant for a leading Creative Software Company in the world
• Lead consultant for PoC testing for 2 new onboarding clients
• Found over 200+ critical bugs in various applications ranging from Android, Web Infrastructure, K8 clusters and
Wireless Security.
• Actively involved in bug triage and responsible for managing the bug life cycle.
• Actively supported red team engagements with vertical/horizontal privilege escalations and FUD(s) development
• Developed a custom C2 environment and framework alongside Red team
Security Consultant, Jan 2023 - Oct 2023
• Trained a team of 100+ on conducting Android Application Penetration Testing and basic Web exploitation
techniques
• Conducted over 50 penetration tests on enterprise applications and infrastructure, resulting in improved security
and reduced risk.
• Wrote multiple detailed reports on Android Application Penetration Testing, Web Application Penetration Testing and
Social Engineering which was later used for briefing the executive management.
• Successfully implemented multiple Red Team operations which helped in improving the
organization's Cyber Security posture.
• Played a key role in incident response and forensic analysis for few critical incidents.
• Performed penetration testing for websites, APIs, Android applications based in various
domains and sectors.
Senior Security Analyst, Oct 2022 - Jan 2023
• Performed security assessments for cloud service providers (IaaS, PaaS, SaaS) and on-premises systems.
• Performed security Assessments for Wireless applications, Mobile applications and Web applications.
• Performed Security audits for critical infrastructure organizations.
• Undertook workshop internally on AD exploitation which includes PTH, PTT, GT, ST and Kerberoasting
Security Analyst, Jun 2021 - Oct 2022
•Performed penetration testing for various MNC(s) from sectors such as financial,
pharmaceutical and technology.
•Performed wireless security testing on Wi-Fi infrastructure of various organisations.
Internship, Feb 2021 - Jun 2021
• Have undertaken hardening activities related to SAP and other websites.
• Wrote scripts to automate manual tasks for reporting.
• Developed and implemented processes to improve the quality of the website
Student Intern
CyberOnion July 2020 - August 2020, Assam, India
• Managed a team of 5 remotely and developed a web application for centralized OSINT tool management.
• Worked with LEA in OSINT data gathering, analysis and reporting.
• Wrote scripts to automate data collection and created a web scraper to gather data from the dark web.
• Gained experience in data management, data analysis, web application development and Python scripting.
Research Intern(Volunteer)
TIFAC-CORE in Cyber Security August 2019 - August 2020, Coimbatore, Tamil Nadu, India
• Investigated wireless applications
• Created and set-up a Packet Sniffer
• Investigated wireless applications
Student Intern
Nuclear Fuel Complex Jan 2020 - Jan 2020, Hyderabad, Telangana, India
• Establishing Open source firewall tool using Iptables
• Designed and implemented a security posture monitoring tool