Naseef M

Cybersecurity professional with hands on experience in Vulnerability Assessment and Penetration Testing (VAPT) across Web, API, Mobile Application Security environments. Proficient with industry standard tools including Burp Suite, Metasploit, Nmap with working knowledge of OWASP Top 10, NIST, and SANS frameworks. EC-Council Certified SOC Analyst with hands-on experience in log analysis, SIEM monitoring and technical documentation.

Cybersecurity Apprentice at Keltron (Kerala State Electronics Development Corporation Ltd) (2025-06 – Present)

• Executed DAST assessments across web, API, and mobile (iOS) application environments using Burp Suite and Nmap; validated exploitability conditions, eliminated false positives, and prioritized vulnerabilities based on CVSS and OWASP Top 10 categories.
• Designed and implemented an Active Directory security lab covering authentication mechanisms, privilege escalation paths, and credential-based attack workflows; authored comprehensive attack-chain documentation detailing NTLM, Kerberos abuse.
• Coordinated escalation of issues to senior team members with full technical documentation including scope, reproduction steps, and recommendations enabling faster response across web and API environments.

Cybersecurity Intern at Red Team Hacker Academy (2024 – 2025)

• Performed security log analysis across HTTP/HTTPS traffic and Linux environments to identify suspicious activities, and attack patterns while strengthening defensive monitoring capabilities; ranked global Top 2% on TryHackMe through consistent CTF participation in security challenges.
• Responsibly disclosed a valid vulnerability via Bugcrowd (Hall of Fame); authored structured investigation report with attack vector, supporting evidence, risk assessment, and remediation actions.

B.Tech in Electronics and Communication Engineering – Mar Baselios College of Engineering and Technology (2020-03 – 2024)