Somanaboina Deepak

Security Analyst with 2.5 years of experience in vulnerability assessment, Application Security (SAST/DAST) and penetration testing of web applications, APIs, mobile applications, network infrastructure, and cloud environments. Holds a Bachelor's degree in Computer Science Engineering and a Cyber Security micro degree at IIT Guwahati, with strong foundations in networking, operating systems, application architecture, and security principles. Skilled at manual testing, validating automated scan results, assigning CVSS-based severity ratings, and producing clear remediation-focused security reports.

Network Security Engineer at ESOFT CONSULTING (2024-09 – Present)

• Conduct regular security assessments and vulnerability scans, identifying and mitigating risks that reduced potential breaches by 40%.
• Defended WordPress sites based on client needs, maintaining overall data security at 95%.
• Implemented cybersecurity plans to protect files from unauthorized modification, destruction, and disclosure, achieving a 99% company data security rate.
• Executed network and server discovery and scanning with Nessus and Nmap to identify exposed services and prioritize remediation based on impact and exploitability.
• Reviewed cloud configurations and IAM permissions to find misconfigurations and access-control gaps translated findings into actionable remediation recommendations for DevOps teams.
• Mapped Active Directory attack paths using BloodHound and executed Kerberoasting and LLMNR poisoning with Responder during assessments to demonstrate privilege escalation vectors.
• Reduced security risks by 20% through installation of physical access controls.
• Assigned severity ratings using CVSS and classified findings as Critical, High, Medium, or Low to guide remediation prioritization and stakeholder communication.
• Scanned Docker images for known vulnerabilities with Trivy and documented remediation steps to fix outdated dependencies.
• Analyzed Kubernetes cluster security with Kube-hunter to identify misconfigurations and weak RBAC controls.
• Advised 5+ clients on cost-effective methods to minimize security risk.
• Coordinated with developers, DevOps, and system administrators to track remediation, perform retesting, and close findings in the workflow.
• Mentored 50+ employees on cybersecurity best practices, reducing attack risk by 27%.

Software developer at Virtusa (2023-03 – 2023-07)

• Cleaned, analyzed, and visualized engineering data to support decision-making and operational reporting.
• Built Excel and SQL-based analyses and automated data transformations using Python to streamline reporting workflows.
• Designed a database modeling technique that boosted data analysis time by 73% YoY.
• Developed training materials using Microsoft Office tools that improved productivity by 68%.

B. Tech in Computer Science and Engineering – Mahatma Gandhi Institute of Technology (2019 – 2023)

Micro-Credit Degree in Cyber Security – IIT Guwahati (2024 – 2025)