Sonai Saha

Cybersecurity enthusiast specializing in web application penetration testing, with hands-on experience in vulnerability assessment, exploitation, and security reporting. Certified eJPT and CAP professional with practical exposure through internships, CTF competitions, and hackathons. Seeking an entry-level penetration testing or VAPT role where I can apply offensive security skills to improve organizational security posture.

IT Support Technician at Assurex e-Consultant (2025-12 – Present)

• Manage Windows/Linux infrastructure and troubleshoot DNS, DHCP, and VPN connectivity issues, applying networking fundamentals relevant to identifying attack surface and misconfigurations
• Perform OS installation, system hardening, and software installation across Windows and Linux endpoints
• Diagnose and resolve hardware, software, and connectivity issues across mixed Windows/Linux environments, maintaining operational uptime for end users

Web Application Penetration Testing Intern at Sturtle Security (2023-09 – 2023-10)

• Conducted manual web application security testing following OWASP Top 10 methodology to identify critical vulnerabilities
• Discovered and documented SQL Injection and Cross-Site Scripting (XSS) vulnerabilities with proof-of-concept demonstrations
• Operated industry-standard tools including Burp Suite, SQLmap, and Nmap during live assessments
• Produced detailed vulnerability reports covering risk ratings, impact analysis, and actionable remediation steps

Bachelor of Technology (B.Tech) in Information Technology – Seacom Engineering College (2027-06)

Diploma in Cyber Forensics & Information Security – Behala Government Polytechnic (2021 – 2024)