Manish Kushwaha

Cybersecurity professional with 4+ years of experience in security audits, penetration testing, government assessments, API security and network auditing. Currently serving as a Senior Information Security Engineer, leading end-to-end technical operations and a specialized VAPT team for enterprise and government clients. Recognized for strong technical leadership, clear client communication and effective team mentorship with a solution-oriented approach.

Actively advancing skills in privilege escalation, red teaming and AWS cloud security with long-term goals aligned toward OffSec certifications and large-scale security engineering.

SR. INFORMATION SECURITY ENGINEER - CODEC NETWORKS PVT. LTD.

(2021-07)

• Successfully delivered 500+ security projects across government and enterprise clients.
• Conducted on-site visits for scoping, architecture reviews and infrastructure mapping.
• Skilled in SAST, DAST and full-stack VAPT across web, mobile (Android/iOS), APIs, networks and thick clients.
• Strengthened SDLC security by integrating SAST/DAST/IAST into development workflows, securing CI/CD pipelines and contributing to DevSecOps automation across multiple client environments.
• Specialized in advanced API security testing including OAuth2 flows, JWT analysis, token manipulation, GraphQL introspection & abuse, WebSocket validation, Webhook exploitation paths, rate-limiting analysis and authorization bypass testing.
• Performed penetration testing using Grey Box, Black Box and non-destructive methodologies.
• Conducted extensive Network & Infra audits, including segmentation and configuration reviews across servers, desktops, firewalls, routers, switches, cloud services and internal/external networks.
• Leading and mentoring a 20 member VAPT team, ensuring high-quality assessments, client communication, process improvement and on-time delivery across multiple parallel projects.
• Tools (General Security): Burp Suite, Postman, ADB, Genymotion, Nessus, Nmap, Acunetix, Metasploit, SQLMap, Dirsearch, Jadx-GUI, Frida, Objection, SonarQube, Nikto, Nuclei.
• Offensive / Red Team Tools: smbclient, psexec, crackmapexec, rpcclient, ldapsearch, BloodHound, winexe, netexec, evil-winrm, smbmap, Responder, hashcat, PowerUp, wmiexec, Windows Exploit Suggester, certutil, secretdump, Ebowla, ODAT.
• AWS Cloud Security: Hands-on audits using ScoutSuite, Pacu and Prowler.
• Prepared VAPT reports, POCs, SAT trackers, project summaries and CERT-IN compliant documentation.
• Contributed to CERT-IN Empanelment preparation, including evidence creation, documentation and standardized VAPT report formatting.
• Conducted assessments aligned with OWASP Top 10, CERT-IN and internal security policies.
• Managed complete VAPT lifecycle: scoping → execution → reporting → remediation validation → closure.
• Acted as technical SPOC for clients and development teams.
• Currently leading an on-site security assessment project at CPCB (Delhi), involving real-time coordination, environment analysis and continuous VAPT execution.
• Delivered mitigation guidance across applications, servers and network components.
• Trained 30–40 interns and served as SME for CCNA, CEH, Linux and WAPT.
• Actively building capabilities in advanced red teaming and OffSec certifications.

INTERNSHIP - GURUGRAM POLICE — CYBER CELL

(2021-06 - 2021-07)

• Gained hands-on exposure to real-world cybercrime investigations by analyzing active cases, studying attack patterns and understanding law-enforcement investigation techniques, strengthening foundational knowledge in cyber threat behavior.

INTERNSHIP - CRIME FREE BHARAT

(2021-02 - 2021-05)

• Completed weekly tasks on VAPT and presented an analytical breakdown of the SQLMap tool, demonstrating its role in exploitation and automation within cybersecurity workflows.

INTERNSHIP - VIRTUALLY TESTING FOUNDATION

(2021-01 - 2021-03)

• Completed VAPT assignments and VMware Hands-on Labs, while gaining additional knowledge on digital and social media security ethics.

MCA - CYBER SECURITY - JAIN UNIVERSITY (ONLINE) (2022-03 - 2024-03)

BCA - IT-COMPUTER SCIENCE - JIMS VK (IPU) (2016-08 - 2019-08)

CBSE - Intermediate (Non-Medical Science) - SMDGN, DWARKA (2015-03 - 2015-03)