Adarsh P

Senior Penetration Tester with 3+ years of experience conducting security assessments, cloud configuration audits, and IAM reviews across multi-cloud environments (AWS, GCP, Azure, OCI). Proven expertise in identifying critical misconfigurations and identity-related vulnerabilities that materially reduce cloud attack surface. Hands-on practitioner with tools including Prowler, ScoutSuite, complemented by deep knowledge of NIST, CIS Benchmarks, SOC 2, and PCI DSS frameworks.

Effective communicator who translates complex technical findings into actionable remediation guidance for both technical teams and executive stakeholders.

Senior Penetration Tester (Promoted) - Wattlecorp Cybersecurity Labs

(2023-01)

• Performed infrastructure penetration tests across internal/external networks and wireless environments, managing 70+ successful VAPT engagements end-to-end.
• Led end-to-end cloud security configuration audits across 10+ multi-cloud environments (AWS, GCP, Azure, OCI), identifying critical IAM misconfigurations, overly permissive roles, and MFA gaps that significantly reduced client attack surface.
• Executed IAM & Identity Security reviews focused on least-privilege enforcement, role boundary analysis, service account abuse, and federated identity risks across Google Workspace and Microsoft 365 tenants.
• Deployed and operated cloud-native security assessment tools including Prowler, ScoutSuite, M365 Assess alongside manual review techniques to produce comprehensive, evidence-based audit reports.
• Conducted Google Workspace (GWS) Security Audits covering admin console configurations, OAuth application access, external sharing policies, and MFA enforcement ensuring alignment with CIS and NIST controls.
• Executed Server Hardening reviews (Linux & Windows) based on CIS Benchmarks; audited Router, Switch, and Firewall configurations to identify architectural weaknesses and non-compliant settings.
• Supported clients in achieving ADHICS Technical Audit compliance and PCI DSS ASV quarterly compliance, ensuring all technical controls met regulatory standards.
• Acted as primary client-facing technical lead; delivered remediation guidance, validated fixes through structured re-testing, and mentored 1–2 junior analysts in advanced cloud and network exploitation techniques.

Security Operations Centre Analyst (Intern) - Wattlecorp Cybersecurity Labs

(2022-01 - 2023-12)

• Engineered and maintained the SOC environment using Splunk and Microsoft 365 Defender for Endpoint, optimising real-time threat detection pipelines and improving Mean Time to Detect (MTTD).
• Conducted proactive threat hunting and malware analysis to identify and neutralise emerging threats before they impacted client infrastructure.
• Supported user access reviews and periodic security audits, enforcing the Principle of Least Privilege (PoLP) and maintaining up-to-date defense-in-depth strategies.
• Produced detailed incident investigation reports for technical and management stakeholders, enabling rapid incident resolution and post-incident learning.

BA - English Literature - Kannur University, Kerala (2017-01 - 2020-12)