• Access-Governed RAG Console (LLM Access Control + Entra ID SSO)

  • Built a RAG assistant that enforces role-based access control at the retrieval layer, so restricted documents are excluded from a non-authorized user's candidate set before the model ever sees them
  • Integrated real Microsoft Entra ID (OAuth2) sign-in with app-role claims mapped to backend RBAC, plus a demo-login fallback so the repo runs with zero external setup
  • Added a prompt-injection scanner (validated by a 10-case attack battery, 10/10 resisted) and full audit logging of every access decision; deployed to Azure App Service
  • GitHub Repo

• NIST 800-171 / CMMC Compliance Baseline Lab

  • Configured Active Directory, Group Policy, Microsoft Intune device compliance, and Entra ID Conditional Access requiring device compliance for cloud app access
  • Hardened Windows Defender Firewall rules and authored a System Security Plan mapping every control to its NIST 800-171 requirement
  • Built a CMMC Level 2 self-assessment scorecard scoring 12 of 15 practices met, with remaining gaps documented as next steps
  • GitHub Repo

• Agentic SOC Analyst (Microsoft Sentinel + Claude AI)

  • Built an agentic AI-powered SOC analyst integrating Microsoft Sentinel with Claude AI
  • Automated KQL query generation, alert triage, and MITRE ATT&CK threat mapping
  • Designed for real-world incident detection and AI-assisted response workflows
  • GitHub Repo

• AWS CloudTrail Threat Detection Pipeline

  • Engineered a serverless threat detection pipeline using CloudTrail, Lambda, SNS, and DynamoDB
  • Implemented 11 detection rules mapped to MITRE ATT&CK, covering Defense Evasion, Privilege Escalation, and Credential Access
  • Confirmed end-to-end real-time email alerting with 100% Lambda execution success rate across 6 invocations
  • GitHub Repo

• Suricata IDS + ELK Stack on AWS EC2

  • Deployed Suricata 7.0.3 IDS on AWS EC2 with custom detection rules monitoring live network traffic
  • Built a log ingestion pipeline (Suricata → Filebeat → Elasticsearch) indexing 110+ security events
  • Designed Kibana dashboards visualizing alert signatures and event type distribution
  • GitHub Repo

• S3 Security Auditor

  • Built a Python (boto3) tool to audit AWS S3 buckets for misconfigurations
  • Performed 6 security checks per bucket covering public ACL, encryption, versioning, and logging with severity classification
  • Generated structured JSON risk reports for remediation tracking
  • GitHub Repo

• SOC Automation Lab with AI Threat Analysis

  • Built end-to-end security pipeline: Windows → Splunk → n8n → OpenAI → Slack
  • Automated threat detection with MITRE ATT&CK mapping and AI-powered analysis
  • Achieved <60s detection and <9s processing time for security incidents
  • GitHub Repo | View Demo

• SOC 2 Type I Audit Simulation

  • Conducted a simulated SOC 2 Type I audit of a personal SOC automation lab
  • Produced formal deliverables: risk assessment, control mapping, and findings report
  • Demonstrated GRC skills including trust service criteria, evidence collection, and gap analysis
  • GitHub Repo

• Fake Job Posting Detection (Published Research — IEEE ICAISS 2025)

  • Detected fraudulent job listings using ensemble ML (Random Forest, XGBoost, Gradient Boosting, AdaBoost)
  • Achieved 98% accuracy across 9,000+ records using SMOTE/ADASYN class balancing
  • Presented at the 3rd International Conference on Augmented Intelligence and Sustainable Systems (ICAISS 2025)
  • Read the Paper | GitHub Repo

• Kali Linux SSH MCP Bridge

  • Built a Claude Desktop ↔ Kali Linux SSH bridge via Model Context Protocol (MCP)
  • Enables AI-assisted penetration testing and security research directly from Claude Desktop
  • Bridges natural language commands to live Kali Linux terminal execution
  • GitHub Repo

• Security Analysis & Hardening Projects

  • Network Security: Configured firewalls, VPNs, and IDS/IPS using Snort with Wireshark analysis
  • Web Security: Built SQL injection detection system and analyzed database security vulnerabilities
  • Linux Hardening: Automated security configurations implementing CIS benchmarks
  • Network Security Report | SQL Analysis | Linux Guide

• CS-5770: Software Vulnerabilities & Security

  • Hands-on security challenges: network forensics, web exploitation, privilege escalation
  • Documented methodologies for packet analysis, SQL injection, command injection, Unix security
  • Tools: Wireshark, Nmap, Burp Suite, SQL injection techniques, privilege escalation
  • GitHub Repo

• CY5001: Cybersecurity Technologies, Threats & Defense

  • Comprehensive coursework in Linux security, cryptography, and network defense
  • Implemented GPG/PGP encryption, OpenSSL operations, digital signatures, and hybrid encryption
  • Built automated security scripts for system hardening and threat detection
  • Skills: Linux administration, Bash scripting, AES/RSA encryption, digital envelopes, log analysis
  • GitHub Repo

• ✅ Deloitte Cybersecurity Simulation

  • Conducted vulnerability assessments and penetration testing
  • Developed security policies and incident response procedures
  • Created executive-level security reports

• ✅ Tata Cybersecurity Analyst Simulation

  • Performed threat hunting and malware analysis
  • Implemented security controls and monitoring solutions
  • Analyzed security logs and created incident timelines

• NIELIT Cybersecurity Internship (Summer 2024)

  • Monitored SOC operations and analyzed security alerts
  • Configured SIEM rules and correlation policies
  • Participated in incident response exercises

• Quizaro Web Development (Spring 2024)

  • Developed secure web applications with input validation
  • Implemented OAuth 2.0 and session management
  • Conducted security code reviews

• Rejolt Data Science (Winter 2023)

  • Built ML models for anomaly detection
  • Analyzed large datasets for pattern recognition
  • Created predictive analytics dashboards

• Google Professional Cybersecurity Certificate (Completed 2025)
  • 8-course comprehensive program covering security fundamentals, network security, incident response, and Python automation

• MS Cybersecurity (2025–2027) – Northeastern University, Boston

  • Relevant Coursework: Software Vulnerabilities & Security (CS-5770), Cybersecurity Technologies, Threats & Defense (CY5001), Network Forensics
  • Focus: Applied cryptography, secure systems, threat analysis

• B.Tech AI & Data Science (2021–2025) – Vardhaman College of Engineering

  • Focus: Machine Learning, Data Mining, Statistical Analysis
  • GPA: 3.8/4.0
  • Capstone: AI-based Intrusion Detection System

Security Tools: Splunk • Microsoft Sentinel • Wireshark • Metasploit • Nmap • Burp Suite • Nessus • Suricata
Identity & Compliance: Active Directory • Group Policy • Microsoft Entra ID • Microsoft Intune • Conditional Access • NIST 800-171 • CMMC
Cloud Security: AWS CloudTrail • AWS Lambda • Amazon S3 • boto3 • Azure • Azure App Service
AI & Automation: Claude AI • OpenAI GPT-4 • n8n • Model Context Protocol (MCP) • RAG • LLM Security • Prompt Injection Defense
Cryptography: OpenSSL • GPG/PGP • AES • RSA • Digital Signatures
Programming: Python • SQL • Bash • PowerShell • KQL • JavaScript
Platforms: Linux • Windows Server • Docker • VMware • AWS • Azure
Frameworks: MITRE ATT&CK • NIST SP 800-30 • NIST SP 800-171 • CMMC • CIS Controls • OWASP Top 10 • SOC 2

Currently seeking Summer/Fall 2027 cybersecurity co-op/internship opportunities in Security Operations, Incident Response, Cloud Security, Detection Engineering, or AI/LLM Security