Vishal

SOC Analyst (L1)

Pune, Maharashtra 80 · Excellent

About

SOC-ready cybersecurity professional with nearly 2 years of freelance experience in web application penetration testing and bug bounty hunting. Skilled in offensive and defensive security, OWASP Top 10, attack surface reconnaissance, vulnerability assessment, SIEM monitoring, log analysis, and incident triage. Solved 200+ hands-on Web Application Security labs on PentesterLab, strengthening practical expertise in web application security and enterprise security operations.

Skills & Expertise (77)

OWASP ZAP Advanced

6.5/10

Years Exp

SQLmap Advanced

6.5/10

Years Exp

Gobuster Advanced

6.5/10

Years Exp

dirsearch Advanced

6.5/10

Years Exp

FFUF Advanced

6.5/10

Years Exp

PARAMSPIDER Advanced

6.5/10

Years Exp

Gau Advanced

6.5/10

Years Exp

Burp Suite Advanced

6.5/10

Years Exp

Nikto Advanced

6.5/10

Years Exp

Caido Advanced

6.5/10

Years Exp

DALFOX Advanced

6.5/10

Years Exp

Nuclei Advanced

6.5/10

Years Exp

Subfinder Advanced

6.5/10

Years Exp

Assetfinder Advanced

6.5/10

Years Exp

Amass Advanced

6.5/10

Years Exp

Naabu Advanced

6.5/10

Years Exp

RustScan Advanced

6.5/10

Years Exp

Httpx Advanced

6.5/10

Years Exp

Katana Advanced

6.5/10

Years Exp

IDOR Advanced

6.5/10

Years Exp

WIRESHARK Advanced

6.5/10

Years Exp

Netcat Advanced

6.5/10

Years Exp

Nmap Advanced

6.5/10

Years Exp

Metasploit Advanced

6.5/10

Years Exp

Web Application Security Advanced

6.5/10

Years Exp

OWASP Top 10 Advanced

6.5/10

Years Exp

Vulnerability Assessment Advanced

6.5/10

Years Exp

Penetration Testing Advanced

6.5/10

Years Exp

Business Logic Vulnerabilities Advanced

6.5/10

Years Exp

SQL Injection Advanced

6.5/10

Years Exp

XSS Advanced

6.5/10

Years Exp

CSRF Advanced

6.5/10

Years Exp

SSRF Advanced

6.5/10

Years Exp

CORS Advanced

6.5/10

Years Exp

testssl Advanced

6.5/10

Years Exp

WPScan Advanced

6.5/10

Years Exp

SIEM fundamentals Intermediate

5.5/10

Years Exp

LINUX Intermediate

5.5/10

Years Exp

Network Security Basics Intermediate

5.5/10

Years Exp

SOC Monitoring Intermediate

5.5/10

Years Exp

Python Intermediate

5.5/10

Years Exp

Alert Analysis Intermediate

5.5/10

Years Exp

incident triage Intermediate

5.5/10

Years Exp

Log Analysis Intermediate

5.5/10

Years Exp

Sysmon Intermediate

5.4/10

Years Exp

Security Onion Intermediate

5.4/10

Years Exp

VirusTotal Intermediate

5.4/10

Years Exp

YARA Intermediate

5.4/10

Years Exp

Sigma Rules Intermediate

5.4/10

Years Exp

TheHive Intermediate

5.4/10

Years Exp

Cortex Intermediate

5.4/10

Years Exp

Shuffle Intermediate

5.4/10

Years Exp

LimaCharlie Intermediate

5.4/10

Years Exp

Cyberchef Intermediate

5.4/10

Years Exp

MITRE ATT&CK Navigator Intermediate

5.4/10

Years Exp

AWS Intermediate

5.4/10

Years Exp

Azure Intermediate

5.4/10

Years Exp

Cloud Security Fundamentals Intermediate

5.4/10

Years Exp

Serverless Architecture Intermediate

5.4/10

Years Exp

Event-Driven Design Intermediate

5.4/10

Years Exp

Browser Developer Tools Intermediate

5.4/10

Years Exp

Bash Intermediate

5.4/10

Years Exp

HTTPS Intermediate

5.4/10

Years Exp

HTTP Intermediate

5.4/10

Years Exp

DNS Intermediate

5.4/10

Years Exp

IP Intermediate

5.4/10

Years Exp

TCP Intermediate

5.4/10

Years Exp

Whois Intermediate

5.4/10

Years Exp

Postman Intermediate

5.4/10

Years Exp

Velociraptor Intermediate

5.4/10

Years Exp

Splunk Intermediate

5.4/10

Years Exp

Microsoft Sentinel Intermediate

5.4/10

Years Exp

IBM QRadar Intermediate

5.4/10

Years Exp

Elastic Security Intermediate

5.4/10

Years Exp

Wazuh Intermediate

5.4/10

Years Exp

CrowdStrike Falcon Intermediate

5.4/10

Years Exp

SentinelOne Intermediate

5.4/10

Years Exp

Work Experience

Independent Bug Bounty Researcher

Self-Directed

Present - Present

Performed end-to-end web application penetration testing on real-world production targets under responsible disclosure programs. Identified and reported authorization issues, IDORs, input validation flaws, CORS misconfigurations, and business logic vulnerabilities. Conducted structured reconnaissance and attack surface mapping using automated and manual techniques. Developed custom automation scripts to streamline recon, parameter discovery, and testing workflows. Authored clear, professional vulnerability reports including proof-of-concept, impact assessment, and remediation recommendations.