About Me
I'm a Security Engineer, PKI Specialist, and DevSecOps Engineer currently serving as a Technical Support Specialist at Sectigo - one of the world's premier Certificate Authorities. My professional focus centers on deep-dive SSL/TLS cryptographic diagnostics, automated Certificate Management Environment (ACME) protocols, and multi-resolver DNS architecture. Beyond routine support, I engineer scalable internal tooling and microservices that accelerate diagnostic triage and operational workflows across global teams.
My technical approach merges offensive security insight with disciplined infrastructure engineering. I hold extensive hands-on experience in vulnerability assessment and penetration testing (VAPT), OWASP Top 10 mitigation, and active system hardening across heterogeneous Linux, BSD, and Windows environments. I am ranked in the Top 4% on TryHackMe, actively solving hands-on challenges across web application exploitation, privilege escalation, and active network reconnaissance. To continuously hone my skills, I operate a dedicated Home Lab Cyber Range & Security Testing Setup - isolating vulnerable targets behind a hardened pfSense firewall with strict 802.1Q VLANs, simulating enterprise Active Directory attack vectors, and analyzing intrusion telemetry through Wazuh SIEM and Suricata.
On the software engineering side, I design and ship production-grade full-stack platforms from ground zero. As Team Lead and DevOps Engineer at BIHER, I led the architecture of Srishty ERP, a high-throughput educational platform actively serving over 10,000 students and faculty with sub-second response times. My development stack spans Go, Python (FastAPI), Node.js/Express, PHP, and React (TypeScript), backed by PostgreSQL, Redis caching, and CI/CD pipelines integrated with SonarQube static analysis and Prometheus monitoring.
I actively explore the intersection of cybersecurity and artificial intelligence. My work includes architecting retrieval-augmented generation (RAG) pipelines that ingest technical documentation and regulatory policies into vector databases (Qdrant) for automated anomaly detection and diagnostic support. Driven by continuous learning, I hold professional credentials in PKI, SecOps, cloud security, and Linux systems administration.
Core Cyber Security & Systems Expertise
-
Offensive Security, VAPT & Cyber Range
TryHackMe Top 4% globally & continuous security practice in private home lab cyber range. Hands-on expertise in Burp Suite Pro, Nmap, Wireshark, Metasploit, SQLmap, Nikto, OWASP Top 10 (Web & API), Privilege Escalation, Protocol Triage & Active Directory attack paths.
-
Defensive Security, SIEM & SOC
Wazuh SIEM, Microsoft Sentinel, Log Analysis, Snort/Suricata IDS/IPS, Threat Hunting, Incident Handling, Fail2ban, Host-based Intrusion Detection (HIDS) & System Hardening.
-
Enterprise Networking & Perimeter Defense
pfSense, FortiGate Firewalls, 802.1Q VLAN Tagging, Subnetting (CIDR), IPSec & WireGuard VPNs, BGP/OSPF Routing, NGINX/HAProxy Reverse Proxies, Cloudflare WAF & DDoS Mitigation.
-
PKI, Cryptography & Chain-of-Trust
ACME Protocol Automation, OpenSSL, TLS 1.3 Ciphers, mTLS Implementation, Private Root & Intermediate CA Design, S/MIME, Certificate Lifecycle Management, CRL/OCSP Validation & DNSSEC.
-
DevSecOps & Container Security
Docker & Kubernetes Hardening, RBAC, NetworkPolicies, SonarQube SAST, Trivy Vulnerability Auditing, CI/CD Pipeline Security (Jenkins/GitHub Actions), Secret Management & Linux Hardening.
-
Full-Stack Security & Tooling Development
Python (FastAPI), Go (Golang), Node.js (Express), React (TypeScript), HMAC Request Signing, Secure Session Handling, Microservice APIs (REST/gRPC), and AI/ML RAG Diagnostics.
