Sunny Bairwa

Cybersecurity Analyst with hands-on experience in Vulnerability Assessment & Penetration Testing (VAPT) and Security Operations (SOC), specializing in Web Application and API Security. Identified and validated critical vulnerabilities — OData Injection, Authentication Bypass, IDOR, Privilege Escalation, and Cloud Misconfigurations — across 7+ live production platforms. Proficient in Wazuh SIEM monitoring, alert triage, log analysis, threat detection, and incident investigation aligned with MITRE ATT&CK.

Adept at end-to-end security assessments, CVSS-scored vulnerability reporting, and remediation collaboration to strengthen organizational security posture.

Cybersecurity Analyst Intern — VAPT & SOC Operations - JRS Innovation Pvt. Ltd. - Jaipur, India (On-site)

(2026-01 - 2026-06)

• Conducted Web Application Penetration Testing on 7+ live international platforms (Oxmaint, Prime, FleetRabbit, HVI, BusCMMS, TruckCMMS, iFactory); exploited OData Injection on Prime achieving full database enumeration and critical Account Takeover (ATO).
• Identified Authentication Bypass, Azure Blob Storage misconfigurations, IDOR on web & Android APKs, and Privilege Escalation (low-privilege → admin) by exploiting missing server-side authorization checks.
• Performed Android APK Security Testing (MobSF, Frida, JADX, APKTool); discovered JWT Validation Issues, insecure local storage, Unrestricted File Upload, Double Extension Bypass, missing CSP headers, and absent rate-limiting controls.
• Deployed and monitored Wazuh SIEM across Linux/Windows endpoints; performed live alert triage, log analysis, and incident investigation using MITRE ATT&CK TTP mapping.
• Authored CVSS-scored vulnerability reports with reproduction steps and remediation guidance, enabling timely fixes by development teams.

Virtual Intern — Ethical Hacking & Penetration Testing - C-DAC Noida | Centre for Development of Advanced Computing — Ministry of Electronics & IT, Govt. of India

(2025-05 - 2025-07)

• Executed vulnerability assessment and penetration testing in controlled lab environments; developed a Cyber Kill Chain research project mapping attack lifecycle phases to detection and defense strategies.

B.Tech - Cyber Security - Government Engineering College, Ajmer (2022 - 2026)