Rahul Devgan

Cybersecurity Consultant at Deloitte with 3+ years of experience in penetration testing, VAPT, risk management, and security consulting across enterprise and government environments. Contributed to security assessments on ministry-level systems for Indian Government clients, receiving formal appreciation from a Joint Commissioner for work delivered on the engagement. Track record of identifying high-severity vulnerabilities, supporting security teams, and communicating risk findings clearly to stakeholders.

MSc Cybersecurity (Distinction). Technical expertise spans web application security, network security, cloud security, and security governance, with working knowledge of ISO/IEC 27001, OWASP Top 10, and MITRE ATT&CK.

Cybersecurity Consultant - Deloitte - Nottingham, United Kingdom

(2026-01)

Enterprise & Government Security

• Conducted security assessments on ministry-level internal websites and critical national systems on behalf of Indian Government ministries — received formal appreciation from a Joint Commissioner for contributions to the engagement.
• Identified 150+ security vulnerabilities across 25+ engagements covering government web portals, enterprise applications, and cloud environments — delivering risk-ranked remediation plans adopted by client technical teams.
• Served as lead security advisor for enterprise and public-sector clients, translating technical security risks into clear business impact and presenting findings directly to C-suite executives and government officials.
• Conducted in-depth web application security testing using Burp Suite Pro, Nuclei, and manual techniques — consistently uncovering high-severity issues missed by automated scanning tools.
• Contributed to cybersecurity improvement initiatives across multiple client environments, supporting a 30% reduction in overall risk exposure.
• Built and led a team of 6 security professionals — mentoring junior consultants, setting quality standards, and ensuring on-time, on-budget delivery for all engagements.
• Performed comprehensive security audits of infrastructure controls, firewall configurations, and access management policies — producing board-ready reports aligned to ISO/IEC 27001 and NIST Cybersecurity Framework.

Associate Information Security Consultant - Orange Mantra - India

(2025-09 - 2025-10)

Web & Mobile Application Security Testing

• Delivered a full VAPT engagement across multiple web applications within a one-month contract — identifying 120+ high-severity vulnerabilities including injection flaws and authentication bypass issues, all documented with proof-of-concept demonstrations.
• Conducted manual and automated security testing aligned to OWASP Top 10; produced detailed, client-ready reports with step-by-step remediation guidance, rated outstanding by the client.
• Reduced malicious inbound traffic by 40% by deploying targeted blocking rules and honeypot infrastructure, significantly shrinking the organisation's active attack surface.
• Assessed mobile application security on iOS and Android platforms, reviewing authentication flows, data storage practices, and API communication for security weaknesses.

Cybersecurity Analyst - Skyway Holidays - India

(2021-09 - 2023-11)

Penetration Testing, SOC Operations & Network Security

• Performed hands-on penetration testing across web applications — identifying SQL Injection, cross-site scripting, insecure access controls, and business logic flaws — reducing total vulnerabilities by 30% and preventing potential data breaches.
• Conducted API security reviews across all customer-facing endpoints, identifying broken access controls and sensitive data exposure risks ahead of production releases.
• Ran security assessments using Burp Suite, OWASP ZAP, Nmap, and Nessus; reduced network-level exposure by 25% through structured, evidence-based remediation follow-up.
• Monitored and triaged security alerts in the SOC using Splunk and Wazuh — cutting time to detect and respond to incidents by 35% through tuned detection rules and log analysis.
• Achieved a 100% closure rate on all critical and high-severity vulnerabilities, with zero repeat findings in subsequent security reviews.

MSc - Cybersecurity - Nottingham Trent University (2024 - 2025)

B.Tech - Computer Science Engineering - GGSIPU (2019 - 2023)