sushant-jadhav_resume

Download as pdf or txt
Download as pdf or txt
You are on page 1of 2

SUSHANT JADHAV

SECURITY ANALYST (OFFENSIVE SECURITY)


961-925-5070 Sushant Jadhav
sushantjj7@gmail.com Navi Mumbai, Maharashtra, India

PROFESSIONAL SUMMARY
I'm a Cyber Security Analyst with 1.5+ years of experience, currently specializing in Offensive Security.
My expertise spans Vulnerability Assessment and Penetration Testing (VAPT) for various platforms,
Red Teaming, OSINT, Phishing. With a strong focus on security assessments and real-world attack
simulations, I have a proven track record of identifying vulnerabilities across Web, API, Mobile
(Android), Thick Client, SAP and Infrastructure/Networks. My technical skills, problem-solving abilities,
and experience allows me to provide valuable insights that reduce risk and improve security posture.
I am dedicated to protecting digital assets and ensuring the confidentiality, integrity, and availability of
information.
CORE COMPETENCIES

web Application Penetration Testing Red Teaming


API Penetration Testing Network/Infrastructure VAPT
Mobile Application Penetration Testing SAST using Automation Tools
Thick Client Penetration Testing Reporting & Documentation

PROFESSIONAL EXPERIENCE
Independent Security Researcher
September, 2024 - Present
Focused on offensive cybersecurity skill development while engaged in freelance penetration
testing for a centralized marketplace provider company.
Prepared for the Territorial Army-Cybersecurity government exam for several months.
Participated in Capture the Flag (CTF) events to maintain hands-on experience in offensive
security and reported bugs on several programs.
Tata Consultancy Services (TCS)
Cyber Security Analyst | December, 2021 - August, 2023
Conducted over 200+ penetration tests on Web, API, Thick Client, Mobile, and SAP Applications,
ensuring HIPAA compliance for US-based clients. Worked with a Top 5 Fortune 500 company in
the Healthcare & Pharmacy sector, delivering comprehensive security assessments to safeguard
critical data and infrastructure.
Core member of Red Team engagements, simulating real-world attacks using TTPs (Tactics,
Techniques, and Procedures) to test organizational defenses
Generated comprehensive security assessment reports and presented findings to stakeholders,
including developers, business leaders, and auditors

Spin The Hack (STH)


Freelance Penetration Tester | October, 2022 - January, 2023
Conducted penetration tests on various projects under mentor supervision as Additional
Experience
Shadowed experienced mentors while performing penetration tests/ Red Team engagements and
freelance projects, gaining hands-on expertise and insights into real-world security assessments.

PIE-INFOCOMM
June, 2020 - August, 2020
Successfully completed internship in “Machine Learning”, Utilized Python libraries and Jupyter
Notebook to create and train machine learning models, contributing to better healthcare insights.
Developed a heart stroke prediction model using patient data in a healthcare project.
Gained experience with handling and processing personally identifiable information (PII) and
sensitive healthcare data, ensuring data privacy and security in compliance.
EDUCATION
2017 - 2021 | Mumbai University | Terna Engineering College, Nerul
Bachelor of Engineering (B.E.) - Computer Engineering (7.83 CGPA)

2016 - 2017 | Maharashtra State Board | St. Mary’s junior College, Vashi
Higher Secondary Certificate (HSC) - Science & IT (74.46%)

2014 - 2015 | Maharashtra State Board | Nutan Marathi Vidyalaya


Secondary School Certificate (SSC) (90.60%)

SKILLS & EXPERIENCE


Offensive Security & Penetration Testing:
Specialized in VAPT for Web, API, Mobile (Android), and infrastructure. Extensive experience in Red
Teaming, covering OSINT, Phishing, Physical Security and Social Engineering. Experience in Threat
MITRE ATT&CK mapping.
Skilled in identifying attack vectors and assessing attack surfaces across diverse assets. Experience in
finding vulnerabilities through extensive research and testing.

Project Management & Client Communication:


Successfully managed and delivered multiple security projects across India and the Americas, adhering
to tight deadlines and service level agreements (SLAs).
Ensured effective client communication to provide tailored security solutions that meet specific
needs, demonstrating a strong ability to thrive in high-pressure environments while maintaining
quality and client satisfaction throughout the project lifecycle.

Leadership & Training:


Led pentest security teams, focusing on mentorship and collaboration to enhance skill development
and ensure timely project completion.
Provided professional training to associate Team Members on manual penetration testing, promoting
knowledge transfer and strengthening team capabilities.

CERTIFICATIONS
eJPTv2 (eLearnSecurity Junior Penetration ICSI- CNSS (Certified Network Security
Tester version 2) Specialist)
CAP (Certified AppSec Practitioner) CRTA (Certified Red Team Analyst)

AWARDS AND ACHIVEMENTS


Let’s Exploit CTF 2023: 1st Place (Global Rank BEH TCS Round 1: 3rd Place - Internal Global
1)- YCF Team CTF for TCS Employees
Rank 2nd in ISRM Cyber Cup 2022: Star Of The Month at TCS: For exceptional
Cybersecurity CTF challenge conducted by performance and contributions to team and
TCS's client's internal security team. client projects
TCS HQ Playground CTF: 7th Place - All-India On-the-Spot Award & Certificate of
TCS Hiring CTF Appreciation: Recognized in TCS Townhall
for exceptional contribution to securing a
Indian Army CTF: Qualified for L2 (Sainya
Fortune 500 client’s infrastructure.
Ranakshetram)
INTERESTS & PROJECTS
Read write-ups, and stay up-to-date with the Participate in cybersecurity events, meetups,
latest trends in cybersecurity. challenges, and competitions, and enjoy football
Heart Stroke Prediction: Developed an and cycling as hobbies.
application predicting heart stroke risk using Keylogger: Created a discreet keylogging script
KNN and Random Forest, securely handling that runs in the background & terminable via
healthcare PII data. Task Manager only.

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy