Candidate Name
Security Analyst with 3 years of experience in both offensive and defensive security testing for web and mobile applications, network vulnerability assessment, and penetration testing (VAPT) for diverse clients.
Offensive Security:
Applied industry-standard methodologies like OWASP Top 10 to cover security vulnerabilities.
Created checklists and test plans to streamline vulnerability assessments.
Used tools such as Burp Suite, OWASP ZAP, SQL Map, Nmap, Metasploit, Frida, John the Ripper, Hydra, and
DirSearch.
Conducted end-to-end security testing, including information gathering, vulnerability assessment, exploitation,
reporting, and mitigation.
Defensive Security:
Configured and managed firewalls using tools like Sophos to prevent unauthorized access and attacks.
Implemented Snort as a NIDS and IPS with various rulesets to detect and prevent malicious activities.
Deployed honeypots to gather intelligence on attack methods.
Monitored network traffic and analyzed logs from firewalls, Snort, and honeypots to promptly identify and respond to
security incidents.
01/06/2025
01/06/2025