Shobhit Shandilya 🇮🇳

Experience

• 

  Oil and Natural Gas Corporation Ltd

  Jun 2019 - Jul 2019

  Intern

  ⦿Network Security & Web Development

• 

  Confidential

  Feb 2021 - now

  ⦿ Leading a portfolio of engagements and projects with our clients; reporting to senior manager and creating reports and via review ensuring the highest quality deliverables prior to Director’s and Partner’s review.⦿ Contributing to developing the market for Cyber Security services across all sectors and identify sales opportunities and escalating these to senior management.⦿ Working with prospective clients to identify opportunities, scope engagements, and create high quality proposals.⦿ Advocating and championing Cyber Security service both internally to our wider network of colleagues and to our clients and the wider market.⦿ Contributing to the creation of proposals and marketing material.⦿ Contributing to the latest thought-leadership, industry research and creation of marketing collateral relating to cyber security. Show less ⦿Conduct Vulnerability Assessments & Penetration Testing of Web application, Mobile application, API, Network devices and Servers (cloud/physical) using own test cases and various open source/ commercial tools such as Burp Suite, Nessus, Nmap, Nipper, Nikto, ZAP, MOBSF, Postman, Metasploit etc..⦿Conduct cyber hygiene practice to minimize the risk of operational interruptions, data compromise and data loss by improving it's overall security posture.⦿Conduct social engineering penetration testing & cyber-attack BAS (Breach And Simulations) as a part of the RED team activity.⦿React and respond immediately to any security-related incidents, and then provide a thorough post-event analysis.⦿Research & Evaluate emerging cyber security threats/ Exploits and ways to manage them.⦿In-depth understanding of Common Vulnerability Exposure (CVE) & CERT advisory database.⦿Manage and coordinate with the VAPT team and client teams, report to the management team with plans, forecasting of resources also make sure smooth operations, and quality delivery.⦿Analyze scan reports and suggest mitigation plan to client. Show less ⦿Skilled in Offensive security, VAPT, OSINT, Footprinting, Social Engineering, Dark Web Monitoring, Phishing, Honey pot, Mobile Forensics, Android application testing, URL analysis, E-mail analysis, Malware analysis(cerbero_suite, Any.run).⦿Collaborate with IT management, the legal department, safety and security, and law enforcement agencies to manage security vulnerabilities.⦿Retrieve, catalog and safeguard digital data related to cyber investigation.⦿Hands on experience in computer and network security by ensuring adequate security measures.⦿Experienced in developing and collaborating on a shared understanding of threat actor behavior to develop a strategic security model using open-source and globally accessible ATT&CK framework.⦿Ensuring systematic approach to reduce critical risks in information assets to a level consistent with management’s objectives.⦿Risk Management, Response, Report and Mitigation.⦿Provide cyber security training to organization personnel.⦿Communication & presentation of progress to Senior Officials, Clients, IT Support Team & Team members. Show less

  • Senior Associate - Cyber Consulting

    Apr 2023 - now

  • Associate - Cyber Consulting

    Jul 2022 - Mar 2023

  • Information Security Consultant

    Feb 2021 - Jul 2022