Shobika S

Proactive and passionate Cybersecurity student with knowledge of ethical hacking, networking, penetration testing, and digital forensics. Skilled in identifying vulnerabilities, analyzing threats, and implementing security measures using Kali Linux tools. Dedicated to continuous learning in cyber defense, threat analysis, and incident response to ensure strong system protection and data integrity.

Security analyst - Enova solutions pvt.ltd

(2026-01)

• Performed web application security testing using Burp Suite (Proxy, Repeater, Intruder, Sequencer, Decoder, Comparer, Collaborator) to identify vulnerabilities including XSS, SQL Injection, IDOR, and authentication issues.
• Conducted network scanning, service enumeration, and internal network security testing using Nmap to assess open ports, services, and overall attack surface.
• Analyzed web server logs from Apache HTTP Server to detect automated attacks, reconnaissance activity, and performed log-based threat detection with mitigation recommendations (WAF, IP blocking).
• Performed static code analysis using Semgrep and conducted server-level and infrastructure security assessments to identify vulnerabilities and misconfigurations.
• Identified security exposures such as publicly accessible phpMyAdmin panels and Git repositories, following end-to-end security testing methodology from reconnaissance to reporting.

Bug Bounty

Experience

• Identified an exposed Git repository on a production system, enabling unauthorized access to source code and internal application files.
• Discovered sensitive data exposure risk, including configuration files, API endpoints, and potential credentials, impacting overall application security posture.
• Performed reconnaissance and web security testing to validate the issue, confirming full repository access and data leakage scope (~100+ files exposed).
• Documented the vulnerability in a structured report with severity assessment (High), detailed proof-of-concept, and clear business impact (risk of code theft and account compromise).
• Recommended remediation measures including restricting public access, removing exposed repositories, implementing access controls, and monitoring for unauthorized access attempts.

Bachelor of science - Cybersecurity - Psgr krishnammal college for women (2023-06 - 2026-04)