Castellum Labs

Castellum Labs is a Cybersecurity company.

• Led and managed a dynamic team of 15+ cybersecurity professionals, overseeing all aspects of cloud security, network security, and threat mitigation.
• Spearheaded the design and implementation of highly secured cloud architecture, particularly in AWS, ensuring robust protection against advanced persistent threats (APTs) and other cyber adversaries.
• Successfully developed and executed a groundbreaking project to build advanced tools for identifying and remediating vulnerable S3 buckets, as well as detecting and neutralizing various cyber vulnerabilities.
• Collaborated with diverse clients across various countries, delivering top-notch security solutions, implementing defense-in-depth strategies, and swiftly patching zero-day vulnerabilities to fortify their infrastructure against cyberattacks.
• Pioneered the creation of a cutting-edge tool that effectively identified and mitigated log4j2 vulnerability, while proactively detecting and responding to multiple cyberattacks targeting critical servers.
• Proposed and implemented a secure access model for EC2 instances, leveraging the innovative Harshi crop vault technology to protect against privilege escalation, lateral movement, and unauthorized access attempts.
• Coordinated with a skilled team to configure powerful network level firewalls, fine-tuning multiple firewall rules for enhanced network segmentation and protection against distributed denial-of-service (DDoS) and many cyber-attacks.
• Devised and implemented Python scripts for comprehensive analysis and removal of inbound rules, mitigating potential risks from excessive AWS security group traffic and preventing unauthorized access.
• Conducted comprehensive firm-wide training on Threat Hunting and Incident Response, elevating the company's cybersecurity posture and preparedness against emerging threats.
• Designed and executed an advanced SIEM and Threat Intel platform, leveraging ELK, Hive, CorteX, and OpenCTI to proactively monitor, correlate, and respond to security incidents in real-time.
• Utilized MITRE attack navigator and cyber kill chain methodologies to gather TTPs and IOCs of various APT groups, successfully identifying and neutralizing sophisticated cyber threats.
• Configured and optimized SIEM rules, enabling the rapid identification of cyberattacks, such as advanced malware, lateral movement, and data exfiltration, while triggering real-time alerts for immediate response.
• Championed the implementation of a DevSecOps model, integrating a sophisticated toolset for continuous security testing, vulnerability assessment, and secure code review to fortify applications against cyber exploits.
• Implemented a robust Web Application Firewall (WAF) and strategically configured WAF rules to effectively identify and thwart OWASP Top Ten web application attacks, such as SQL injection and cross-site scripting (XSS).
• Tools: Python, AWS, Elastic Search, CSF Firewall, Harshi Crop Vault, Git Lab, Jenkins, Hive, Cortex, OCTI, MISP.

Gurugram Police Cybersecurity Summer Internship

Gurugram Police is a cyber police department where I have learned about real-time cyber crime cases and cyber attacks.

• Took a part in analysing and understanding the real time cybercrimes in India.
• Worked on different technologies, tools and studied different Cybercrimes happened in India

MAVEX

MaveX is a Start-up company where I started my journey from the beginning of the project.

• Conducted comprehensive web application security testing, Android application security testing, and API assessments, ensuring the identification and mitigation of potential vulnerabilities.
• Collaborated seamlessly with a dedicated team to address and resolve identified security issues promptly, enhancing the overall resilience of the organization's digital assets.
• Expertly performed log analysis, leveraging cutting-edge tools and methodologies, to detect and analyze potential threats, proactively safeguarding critical systems from cyberattacks.
• Played a key role in assisting the team with vulnerability patching and security remediation efforts, fortifying the organization's infrastructure against emerging cyber threats.
• Tools: Python, Selenium, Php, Burpsuite, Nessus, Fuzzy, Apk Analyser, MobSF, MARA, Jenkins, Apache Jmeter.

Languages and Databases

Python

HTML5

CSS3

MySQL

PostgreSQL

Shell Scripting

GoLang

Libraries

NumPy

Pandas

OpenCV

scikit-learn

matplotlib

Tools

Nmap

Wireshark

Metasploit

Burp Suite

Nessus

Ghidra

Other

Git

AWS

Heroku

Jenkins

Key Cloak