Cyber Security Penetration Testing

June *, ****

Shubham Bhowmik

Cyber Security Analysis/VAPT

PROFILE SUMMARY

Dedicated and detail-oriented Penetration Tester with over 9 months of hands-on experience in identifying and mitigating security vulnerabilities. Proficient in web application penetration testing, with a solid foundation in networking and cybersecurity tools,Cloud, aws. Adept at using Burp Suite and other technologies to protect systems from threats like SQL injection and XSS, SSRF. Possesses strong communication, reporting, and presentation skills. Currently pursuing a Bachelor of Technology in Computer Science and Engineering, actively engaged in cybersecurity projects and team leadership roles. EDUCATION

Chandigarh Group of Colleges Jhanjeri CGC Jhanjeri Punjab, India BTech in Computer Science and Engineering; CGPA 7.5 August 2021 - June 2024 Indian Cyber Security Solutions Kolkata, India

Diploma in Cyber Security(DCS); Grade A+ Sept 2020 - Jan 2023 Gomati District Polytechnic Agartala, Tripura, India Diploma in Computer Science and Technology; CGPA 8.26 May 2018 -June 2021 SKILLS SUMMARY

Programming Languages : Bash

Technical Skills : Risk Management, Threat Analysis, Network Security, Incident Response planning, Vulnerability Assessment, Penetration Testing, VAPT, NPT,WPT,CEHP,SOC.

Databases : MySQL.

Operating Systems : Windows, UNIX/Linux.

Security Tools & Technologies : Firewall(Palo Alto),VPNs,Kali Linux tools,Buprpsuit,Nikto,git,OWASP,GNS3,Packet Tracer,Virtualization technologies,TCP/IP protocols,Metasploit,· OWASP ZAP (Zed Attack Proxy),SQLMap,Nmap,W3af,Acunetix,Nessus,Hydra,John the Ripper,Wireshark, AD(Active Directory), Cloud, Windows Server Management,Remote Desktop Services,Group Policy Management,AWS,Ids/Ips. Soft Skills : Rapport Building, Strong management, People Management, Good communication,Time Management, Teamwork, Problem-solving, Documentation, Presentation.

WORK EXPERIENCE

Android Application Penetration Testing THECYBERHOST LINK July 23 - Aug 23

• worked on a pro ect related to Android Application Penetration Testing.

• Learn how to work app and server.

• Built knowledge and improved skill.

• Find this kind of vulnerability Insecure data storage, Cross-Site Scripting (XSS), Insecure logging, Hardcoded issues, Code obfuscation.

Web Penetration Tester CGC-J LINK January 23- March 23

• Collaborated with a single person to penetrate the website and make proper documentation.

• Vulnerability Reporting on my college website and E.R.P portal. using burp-suite and many other technologies. Protect college website and

• E.R.P portal from threats and Vulnerability like SWEET32, SQL injection, etc. June 3, 2024

Penetration Tester Indian Cyber Security Solutions LINK January 24- March 24

• Collaborated with a two-person team to penetrate the website and make proper documentation.

• Automated and optimized pentest using nesses and Linux tools. live web security and testing knowledge. Knowledge of Windows, Linux, and

• UNIX operating systems. Also, knowledge of security tools and bash language. Black box testing. PROJECTS

SCAN( Secure Campus Area Network) LINK JAN 24 - MAY 24

• Final Year project

• The Secure Campus Area Network (SCAN) project focuses on designing, implementing, and assessing a robust network security framework tailored for educational institutions.

• It begins with evaluating the current infrastructure to identify vulnerabilities and proposes solutions like encryption protocols, access controls, and intrusion detection systems.

• The implementation involves deploying firewalls, VPNs, secure Wi-Fi, and continuous monitoring tools.

• The network's effectiveness is tested against common cyber threats, with performance metrics ensuring minimal user impact while maintaining high security standards.

Vulnerability Assessment and Penetration Testing LINK JUN 22 - AUG 22

• Personal project

• In this penetration testing, I am experiencing lots of technic and methods as a Penetration Tester. Given below are some other essential skills.

CERTIFICATION & LICENSES

• Certified WEB Application Penetration Testing - C WAPT (ICSS) CERTIFICATE June 2022

• Certified Ethical Hacking professional (CEHP)(ICSS) CERTIFICATE September 2021

• Cisco Certified Network Associate Routing and Switching (CCNA) (ICSS) CERTIFICATE January 2021 ACHIEVEMENTS

• CGC-j HACKTHON 2k23, 6th on this Hackathon in 1000+ student, 25+ team in final round.

• Best cadre in NSS, best team leader on the campus. LANGUAGES

• Bengali Mother Tongue and Native proficiency.

• English Professional proficiency.

• Hindi Native proficiency.

Contact this candidate