Summary
Overview
Work History
Education
Skills
Websites
Certification
Accomplishments
Training
Awardsconferencesevents
Languages
Timeline
Generic

AMAN KUMAR PATHAK

Gurgaon,Haryana

Summary

An accomplished Cybersecurity professional adept at bridging business and technology, acting as a customer advocate, and Cybersecurity advisor to integrate robust protections into operational activities and creative processes. Skilled in designing and delivering tailored Cybersecurity solutions aligned with business goals and risk profiles. Expertise spans penetration testing, secure code reviews, compliance auditing, and leveraging advanced tools toidentify vulnerabilities, mitigate risks, and strengthen enterprise security. Adept security analyst with several years of experience optimizing software and network security. Consulted with clients to understand technology needs, determining needed software and network features and configuring to store and transmit sensitive data with minimal risk of compromise. Maintained current security-related software installations and network settings. Knowledgeable specialist strengthening systems through education and effective use of security tools.

Overview

4
4
years of professional experience
1
1
Certification

Work History

Sr. Security Analyst

ITOrizin Technology Solutions Pvt. Ltd
Remote
01.2021 - Current
  • Conducted comprehensive penetration testing across multiple sectors, including banking, stock exchanges, healthcare, and more.
  • Led Red Team operations, simulating advanced persistent threats to assess and enhance organizational security.
  • Performed network penetration testing to identify vulnerabilities and strengthen network defenses
  • Executed penetration testing for Android mobile applications, ensuring security through static and dynamic analysis
  • Conducted extensive testing of thick-client applications, identifying security weaknesses, and recommending mitigation strategies.
  • Performed web application and API penetration testing, detecting vulnerabilities, and ensuring compliance with security best practices.
  • Engaged in IT/OT (Information Technology/Operational Technology) penetration testing to secure industrial control systems and critical infrastructure.

Cybersecurity Intern

Gurgaon Police Cyber Cell
Gurgaon
06.2021 - 07.2021
  • Assisted in investigating and analyzing cybercrimes, identifying threats and vulnerabilities
  • Gained hands-on experience with various cybersecurity tools and techniques
  • Conducted research on emerging cyber threats and contributed to preventive measures
  • Supported the team in gathering digital evidence for law enforcement
  • Collaborated with senior analysts on cybersecurity policies and regulations

Education

BCA -

Indira Gandhi National Open University
Delhi
01-2021

Skills

  • Bash scripting
  • HTML
  • CSS
  • JavaScript
  • PHP
  • Python scripting
  • Penetration Testing
  • Vulnerability Detection and Mitigation
  • Secure Code Review
  • Dynamic Android security
  • Secure Configuration Review
  • Network Security Optimization
  • Threat Intelligence Collaboration
  • Proof of Concept Creation
  • Impactful Reporting and Communication
  • Secure Development Advocacy
  • Vulnerability Mitigation
  • Industry-Specific Security Testing
  • Advanced Security Tool Mastery
  • Good planning and organization
  • Red Team Operations
  • Cloud security expertise
  • Tenable SC
  • API penetration testing

Certification

  • Certified EC-Council Ethical Hacker (CEH V11)
  • Certified KLCP (Kali Linux Certified Professional)
  • Certified Offensive Security Certified Professional (OSCP)
  • Certified Offensive Security Wireless Professional (OSWP)
  • Certified API Security Professional - APIsec University (API Pentester)

Accomplishments

  • Hack The Box: Ranked among the top 1000 (Elite Hacker) globally
  • TryHackMe: Ranked 83rd globally
  • Bug Bounty Awards: Recognized on HackerOne
  • Bug Bounty Awards: Recognized on Bugcrowd
  • Discovered vulnerabilities, including leaks of sensitive data from government and private companies, and reported them to the National Critical Information Infrastructure Protection Centre (NCIIPC) in India.
  • Active Directory Red Teaming: Conducted Black Box penetration testing using offensive techniques

Training

  • Certificate of Completion - Palo Alto Networks Assessment-Based Certification
  • Certificate of Completion - 100W Cybersecurity Practices for Industry Control Systems - U.S. Department of Homeland Security (CISA)
  • Certificate of Completion - 210W-01 Differences in Departments of Industry Control Systems (FY22)
  • Certificate of Completion - The Fundamentals of SOC - Assessment
  • Certificate of Completion - IBM - Penetration Testing, Incident Response, and Forensics
  • Certificate of Completion - NSE 1 Network Security Associate: NSE Training Institutes
  • Ongoing Training - CRTO (Certified Red Team Operator)
  • Ongoing Training - OSED (Offensive Security Exploitation Developer)

Awardsconferencesevents

  • Multiple Released Boxes Pwned: Successfully exploited and solved multiple boxes, earning badges and recognition.
  • Participant - Null Mumbai Meetup: Engaged with the cybersecurity community through the Null Mumbai Meetup.
  • Participant - The Hackers Meetup: Participated in discussions and networking at The Hackers Meetup.
  • Participant - Hack the Box: Active in solving challenges on the Hack the Box platform, enhancing penetration testing and security skills.
  • Participant - BreachForce: Competed in the BreachForce cybersecurity competition.
  • Active CTF Player: Regular participant in Capture The Flag challenges, continuously honing technical skills.

Languages

Hindi
First Language
English
Intermediate (B1)
B1

Timeline

Cybersecurity Intern

Gurgaon Police Cyber Cell
06.2021 - 07.2021

Sr. Security Analyst

ITOrizin Technology Solutions Pvt. Ltd
01.2021 - Current

BCA -

Indira Gandhi National Open University
AMAN KUMAR PATHAK