Red Team & Offensive Security Engineer

I lead full-scope red team and VAPT engagements across web applications, APIs, internal networks, and perimeter infrastructure. I emulate real-world threat actors, conduct Active Directory attack-path discovery, credential abuse, privilege escalation, lateral movement, and post-exploitation activities mapped to MITRE ATT&CK.

I have identified and reported more than 50 critical and 70 high-severity vulnerabilities in enterprise and national-scale assessments. I provide prioritized remediation guidance and perform retest validation before sign-off, including remediation of cryptographic weaknesses such as legacy TLS configurations and SWEET32 ciphers.

I support public-sector and critical-infrastructure engagements, including border-security, counter-terrorism, telecommunications monitoring, and regulatory systems. I also engineered an on-premise ELK SIEM with custom dashboards and tuned detections, authored SOC SOPs and incident-response playbooks, hardened routing and NGFW environments, deployed WireGuard and Zabbix, and built Python/Bash automation for reconnaissance, parsing, and reporting.

I performed host and endpoint digital forensics on compromised PCs, laptops, and mobile devices to isolate malware and reconstruct attack timelines. I also created OSINT profiles and evidence dossiers to support victims and law-enforcement actions.

I executed advanced internal penetration testing, including Active Directory attack chains, network reconnaissance, credential-cache capture, and NT-hash retrieval using tools such as Certipy, Impacket, Hashcat, and Kerbrute. I also conducted cryptocurrency wallet and blockchain analysis to trace malicious actors and illicit digital assets.

CGPA: 3.35. Focused on security architecture, threat modeling, offensive security, and defensive security.

Focused on software engineering, data structures and algorithms, computer networks, operating systems, databases, and cybersecurity foundations.