Cybersecurity Professional

Cybersecurity professional with hands-on experience across VAPT, penetration testing, security monitoring, threat intelligence, vulnerability assessment, incident response, and product security. Experienced in both offensive and defensive security operations, with a strong focus on real-world security investigations and continuous security improvement.

Contact Me

About Me

function aboutMe() {
    // Offensive & Defensive Security
    const skills = [
        "VAPT & Penetration Testing",
        "SOC & Incident Response",
        "Threat Intelligence",
        "Product Security"
    ];
    return "Cybersecurity professional focused on security operations.";
}

Cybersecurity professional with hands-on experience across VAPT, penetration testing, security monitoring, threat intelligence, vulnerability assessment, incident response, and product security. Experienced in both offensive and defensive security operations, with practical exposure to security investigations, attack simulations, OSINT, and security automation.

Experience

Product Security Specialist

CloudSEK

Nov 2025 – Aug 2026
  • Performed attack-surface analysis and vulnerability assessment across web, network, mobile, API, cloud, and other client assets.
  • Conducted OSINT and threat intelligence investigations involving phishing, exposed credentials, malicious infrastructure, and other security threats.
  • Investigated phishing URLs, fake domains, rogue applications, and social media impersonation as part of Brand Threat Protection operations.
  • Investigated exposed data across code repositories, API platforms, open buckets, and compromised systems, supporting client security assessments and remediation workflows.

Cybersecurity Analyst

Techbyheart

May 2025 – Oct 2025
  • Performed lab-based offensive security activities including privilege escalation, lateral movement, persistence, defense evasion, and post-exploitation.
  • Conducted Active Directory attack simulations involving enumeration, Kerberoasting, ACL abuse, credential attacks, and lateral movement.
  • Practised adversary simulation using Metasploit, Mimikatz, Cobalt Strike, and Kali Linux across Windows and Linux environments.
  • Applied MITRE ATT&CK and Cyber Kill Chain concepts during attack simulations and security detection validation.

Core Expertise & Skills

Offensive & Application Security

  • VAPT & Penetration Testing
  • Web Application Security
  • API Security & Postman
  • OWASP Top 10, XSS, SQLi, IDOR, BOLA
  • Authentication & Access Control Testing
  • Burp Suite, OWASP ZAP, Caido
  • sqlmap, ffuf, Nmap

Red Team & Infrastructure

  • Active Directory Security
  • Privilege Escalation & Lateral Movement
  • Post-Exploitation
  • Adversary Simulation
  • Kerberoasting, ACL Abuse, NTLM Attacks
  • Metasploit, Cobalt Strike, Mimikatz
  • BloodHound, BeEF, Hydra

SOC & Incident Response

  • Security Monitoring & Alert Triage
  • Incident Response & Escalation
  • SIEM / SOC Operations
  • Splunk, IBM QRadar, Wazuh
  • Sysmon & Windows Event Logs
  • MITRE ATT&CK & Cyber Kill Chain
  • Security Detection Validation

Threat Intelligence & Security Operations

  • OSINT & Threat Intelligence
  • Dark Web & Credential Monitoring
  • Phishing & Brand Threat Protection
  • Threat Investigation & Analysis
  • VirusTotal, Any.Run, Hybrid Analysis
  • XVigil, BeVigil, SVigil
  • Security Reporting & Takedowns

Reconnaissance & Security Automation

  • Domain & Subdomain Enumeration
  • Live Host & Attack-Surface Discovery
  • JS / API Analysis
  • Secrets & Credential Discovery
  • Amass, Sublist3r, Masscan
  • Python, Bash & Automation
  • Security Evidence Collection

Network, Cloud & Security Tools

  • Network Security & Traffic Analysis
  • Wireshark, Nmap, Masscan
  • Nessus, OpenVAS, Tenable
  • DNS, SSL/TLS & Cloud Security
  • Kali Linux & Docker
  • JIRA & Confluence
  • Python, Django, HTML, CSS, JavaScript

Projects

Automated Reconnaissance & Vulnerability Analysis

Built an automated security reconnaissance tool for domain and subdomain enumeration, live-host discovery, JS/API analysis, attack-surface mapping, and identification of exposed secrets, credentials, tokens, and configuration leaks.

URL Investigation & Evidence Collection

Built an open-source bulk URL capture tool for validating discovered subdomains, live web assets, phishing pages, brand impersonation, and suspicious URLs at scale, with proxy/VPN support, rate limiting, screenshot detection, and automatic retries.

Web Application VAPT

Performed web application security assessments covering OWASP Top 10 vulnerabilities including XSS, SQL injection, IDOR, BOLA, authentication, and access-control weaknesses, with PoC validation and remediation reporting.

Active Directory Attack Simulation

Simulated Active Directory attack paths in lab environments involving enumeration, Kerberoasting, ACL abuse, privilege escalation, credential attacks, and lateral movement, mapped to MITRE ATT&CK.

Red Team Adversary Simulation

Practised attack lifecycle and post-exploitation techniques using Metasploit, Mimikatz, Cobalt Strike, and Kali Linux, including persistence, privilege escalation, defense evasion, and lateral movement.

SOC Monitoring & Detection Lab

Built and practised SOC monitoring workflows using Splunk and security logs to analyse alerts, investigate simulated incidents, validate detection logic, and document findings using MITRE ATT&CK techniques.

Achievements

Winner of CTF Challenges (College & Institutions)

TryHackMe Top 10 in India

MYSY Scholarship – Academic Merit

12th Science – School First (93%)

Currently Learning

Advanced VAPT

Product Security

Threat Hunting

eJPTv2

Certificates

CEH v13

CST & CSA

Jr Penetration Tester

Full Stack Django

Get In Touch

Contact
Email: shaanpatel529@gmail.com
Contact Number: +91 6351739479
Location: Bangalore, Karnataka, India

Interested in cybersecurity collaboration, penetration testing, SOC operations, or product security assessments? Feel free to reach out!