Securing systems through AI-driven intelligence and an offensive security mindset.
I'm a Cybersecurity Engineering student at KCG College of Technology (CGPA 8.44), graduating 2027 — building at the intersection of offensive security and AI-driven threat detection.
My journey started with curiosity about how systems break. That curiosity evolved into real VAPT engagements, CTF podium finishes, and AI-powered security tools. I don't just find vulnerabilities — I understand why they exist and architect systematic defenses against them.
Whether scanning for OWASP Top 10 flaws, engineering adaptive Zero Trust concepts, or deploying ML for anomaly detection — I approach every challenge with an attacker's instinct and a defender's discipline.
A structured, methodology-driven web application penetration test against a live education platform. Identified and documented critical vulnerabilities using the OWASP Top 10 framework, manual testing techniques, and automated tooling — culminating in a boardroom-ready security report with actionable remediation guidance.
Passive OSINT via WHOIS, Shodan, and Google dorking. Active recon with Nmap enumerated open ports (80, 443, 3306), service versions, OS fingerprinting, and CMS identification.
Gobuster bruteforced directories, exposing /admin and /backup. Burp Suite intercepted session cookies, auth tokens, and POST parameters. OWASP ZAP ran full DAST scans across all endpoints.
Confirmed SQL Injection in login endpoint via SQLmap. Identified IDOR at /user?id=, reflected XSS in search param, and missing HSTS/CSP headers. All findings CVSS v3.1 scored.
Delivered structured VAPT report with executive summary, technical evidence with PoC screenshots, risk matrix, CVSS scoring, and a prioritised remediation roadmap aligned with OWASP.
Designed a conceptual Zero Trust network firewall that dynamically adjusts access policies in real-time using behavioral AI, device posture scoring, and live threat intelligence — moving beyond perimeter-based thinking to identity-aware, packet-level verification.
Secured first place in the inter-college CTF hosted by KCG Department of Cybersecurity — web exploitation, cryptography, reverse engineering, forensics, and OSINT challenges.
Placed 3rd in the SRM University Cyber Hackathon — built a security solution prototype under 24-hour constraints, demonstrating rapid threat modeling and development.
30-day cybersecurity practice streak — completing rooms in penetration testing, privilege escalation, web hacking, and Active Directory attack paths.
Event Lead at Cyber Fest Cybersecurity Symposium — organized and ran the Among Us Cybersecurity social engineering challenge event.
Simulating advanced threat actors to stress-test defenses. Understanding full attack chains from initial access to lateral movement and exfiltration.
Static and dynamic analysis of malicious code to understand behavior, persistence mechanisms, and C2 communication patterns.
Applying ML to automate threat detection, build intelligent SIEM enrichment, and detect zero-day anomalies at scale.
Designing systems where no user or device is implicitly trusted — continuous verification at every layer of the network stack.
Securing cloud-native infrastructure against IAM misconfigurations, S3 exposure, container escapes, and cloud-specific vectors.
Building automated recon pipelines, SIEM alert enrichment workflows, and vulnerability triage systems using Python.
An attacker only needs to succeed once. A defender must succeed every single time. That asymmetry is exactly why I choose to think like both.
Available for cybersecurity internships, entry-level roles, and research collaborations. Let's build something secure.