Paramananda Gaigaria

Entry-level SOC Analyst, TryHackMe SOC Level 1 certified, who builds and breaks labs to learn detection — not just reads about it. Runs a home SOC (Wazuh, ELK/Kibana, Snort, Sysmon) generating real attack traffic from live C2 frameworks (Sliver, Empire, Mythic) and writing tuned detection rules against it, with every investigation documented as a write-up. VAPT background adds an attacker's-eye view to alert triage. GitHub, TryHackMe, and lab write-ups below are the proof.

Cybersecurity Intern at The Cyber Ledge (2026-02 – 2026-04)

• Mapped 4 MITRE ATLAS adversarial-AI techniques (AML.T0043, T0005, T0018, T0051) to MITRE ATT&CK, producing structured detection references used in threat-monitoring workflows.
• Authored a 12-page ransomware evolution report across 4 major RaaS families (LockBit 3.0, ALPHV/BlackCat, Cl0p, PC Cyborg), covering IOCs and encryption behavior relevant to alert triage.
• Mapped 3 real-world ICS/OT incidents (INDUSTROYER2, Colonial Pipeline, Volt Typhoon) to all 4 layers of the Purdue Model, documenting PLC/HMI/RTU/SCADA monitoring points.
• Analyzed an AWS supply-chain attack (IAM misconfig → priv-esc → S3/ECR poisoning), documenting CloudTrail/GuardDuty detection signals and least-privilege mitigations.

Cybersecurity Intern at CyberDojo – The School of CyberDefense (2025-06 – 2025-08)

• Scanned and validated 7+ exploitable vulnerabilities across web and network targets using Nmap, OpenVAS, and Nessus, scoring each with CVSS v3.1 and remediation guidance.
• Identified OWASP Top 10 vulnerabilities (SQLi, XSS, LFI, IDOR, weak authentication) during assessments, sharpening the pattern-recognition later applied to SOC alert triage, and reviewed exploitation/post-exploitation activity in Metasploit labs to understand attacker behavior used for detection and log correlation.

B.Tech in Computer Science & Engineering – Biju Pattniak University of Technology, Rourkela (2026-05)