Sumit Nayak

Results-oriented Cybersecurity Analyst with hands-on expertise in both Offensive (Red Team) and Defensive (Blue Team) security operations. Actively sharpening skills on PortSwigger, TryHackMe, and private Capture The Flag (CTF) competitions. Demonstrated proficiency in vulnerability assessment and penetration testing across web applications, APIs, and network infrastructure using industry-standard tools and frameworks.

Engineered a comprehensive automation framework that reduced bug bounty recon setup time by 80% through automated subdomain enumeration, port scanning, and system hardening. Hands-on experience in Security Operations Center (SOC) operations, SIEM log analysis, digital forensics, incident response, and threat intelligence through intensive practical training and self-built lab environments. Integrate offensive best practices into development lifecycles, enhancing overall security posture and protected digital environments.

Cybersecurity Trainee & IBM SkillBuild Intern at ISOEH, Bhubaneswar & IBM SkillBuild

• Hands-on Technical Training: Practical expertise in ethical hacking and penetration testing across web, network, and mobile platforms, including security mitigation strategies.
• SOC & Incident Response: Direct experience in Security Operations Center (SOC) workflows, digital forensics, and live incident response simulations.
• Advanced Academic Specialization: Completed a 1.5-year Diploma in Cybersecurity, focusing on advanced offensive and defensive security disciplines.
• IBM SkillBuild Internship: Executed threat intelligence, network defense, and vulnerability management modules within simulated enterprise environments.

Bug Bounty Hunter & Security Researcher at ISOEH, Bhubaneswar & IBM SkillBuild

• Responsible Disclosure (Citi Group): Professionally identified and reported critical security vulnerabilities to Citi Group via official disclosure channels.
• Platform Security (Rocketlane): Discovered and mitigated a significant signup flow vulnerability within the Rocketlane SaaS platform.
• Active Vulnerability Research: Engaged in ongoing research across public bug bounty programs using advanced reconnaissance and OWASP Top 10 methodologies.
• Coordinated Reporting: Demonstrated professional communication and ethical standards in managing end-to-end vulnerability disclosure processes.

B.Tech in CSE (IoT) – GITA Autonomous College, Bhubaneswar (2023-08)

Diploma in Cybersecurity – Indian School of Ethical Hacking (ISOEH), Bhubaneswar