Sthitaprajna Biswal

AI is analyzing your overall score…

Identifying your key strengths…

Evaluating your skill match against the job requirements…

Assessing your cultural and operational fit

• Extensive hands-on experience (2+ years) in offensive security, VAPT, and red teaming across diverse environments including web, API, mobile, cloud (GCP/AWS), Kubernetes, and internal networks.
• Proficiency with a wide array of industry-standard offensive security tools such as Burp Suite Pro, Metasploit, Nmap, OWASP ZAP, Aircrack-ng, SQLMap, and Nessus.
• Strong understanding and practical application of security frameworks and methodologies including OWASP Top 10 (Web & API), MITRE ATT&CK, PTES, and CIS Benchmarks.
• Demonstrated ability to identify, exploit, and remediate critical vulnerabilities, including authentication bypass, IDOR, injection, misconfigurations, and protocol abuse (e.g., MQTT).
• Experience in regulated environments (RBI, NPCI, UIDAI, PCI DSS) with a proven track record of mapping security findings to compliance and audit expectations.
• Proficiency in scripting and automation (Python, Bash, Google Apps Script) for reconnaissance, scanning, and reporting, enhancing efficiency in offensive engagements.
• Certifications such as eJPT v2, Practical Ethical Hacker (PEH), INE Certified Cloud Associate (ICCA), and Cisco CyberOps Associate, validating foundational and intermediate security skills.
• Experience with SIEM tools (Wazuh, Zabbix) for offense-aware testing, log analysis, and tuning detection-evasion strategies.
• The candidate's objective and professional experience align very strongly with a Security Analyst role focused on offensive security, penetration testing, and red teaming.