Satya Prakash | InfoSec Portfolio

Blog

Hello World ! I'm Satya Prakash

Security Analyst | Bug Hunter | Security Researcher | Penetration Tester

About Me

Hi, I am Satya Prakash 👋

I am a Certified Ethical Hacker with over 7 years of experience in IT Security, specializing in Vulnerability Assessment & Penetration Testing (VAPT) and Red Teaming engagements. I have hands-on expertise in Web, API, Mobile, Cloud, and Network penetration testing, along with experience in threat hunting, risk assessments, and incident management.

Proficient in methodologies like OWASP Top 10, SANS Top 25, MITRE ATT&CK, and OSINT. Skilled with tools such as Burp Suite, OWASP ZAP, Nmap, Nuclei, Nessus, Metasploit, Wireshark, and more, including manual testing techniques. I also have strong knowledge of frameworks such as ISO 27001, SAMA, NCA, and NIST.

Beyond professional work, I actively participate in CTFs like TryHackMe and HackTheBox, and contribute to Bug Bounty & Responsible Disclosure Programs. My contributions have earned multiple Hall of Fame mentions, acknowledgments, and swags for high-quality vulnerability reports.

My Blog Download My Resume

Skills

Web Application Penetration Testing

Network Penetration Testing

Android Penetration Testing

API Penetration Testing

Operating System - Linux/Windows

Bash Scripting

Python

HTML/CSS

JavaScript

Automation

GitHub

YAML

Experience

TechnoVal, Hyderabad

Penetration Tester & Risk Analyst

Dec 2023 - Present

• Conducted Red Teaming engagements on critical client assets, testing endpoint security, firewall bypass techniques, insider threat simulations, and advanced adversary simulation techniques, including phishing, lateral movement, privilege escalation, and persistence tactics to test organizational defences.
• Delivered multiple VAPT (Remote) and Risk Assessment (Onsite) projects for clients, identifying vulnerabilities and providing tailored security solutions.
• Led Security Awareness Training for employees, educating them on the latest security threats and best practices to mitigate risks.
• Utilized ChatGPT for tool development and automating VAPT report preparation, improving content quality and report generation efficiency.
• Performed comprehensive Web, API, Mobile, and Network Penetration Testing using WhiteBox, GreyBox, and BlackBox methodologies.

Vatins, Hyderabad

Cyber Security Analyst

Apr 2023 - Oct 2023

• Led and executed Red Teaming engagements for external clients, simulating real-world attack scenarios to evaluate their security posture.
• Worked on Internal and External Penetration Testing activities on the client scope of assets and reported the findings with a detailed VAPT Report.
• Conducted the Onsite Internal Network Penetration Testing and Threat-hunting activities on the Local Law Enforcement Agencies.
• Delivered the security sessions to the local police departments on the latest emerging techniques on how to use Open-Source tools to find and retrieve the Information needed as part of their investigations.

My Next Film Pvt Ltd, Remote

Web Application Security Analyst

Sep 2022 - Feb 2023

• Worked on Internal and External Penetration Testing activities on the MyNextFilm website.
• Reported the findings with a detailed VAPT Report and created the Jira tickets for each vulnerability with the Remediation steps.
• Co-ordinated with the developers in fixing the reported vulnerabilities.

CyberXchange · Internship, Hyderabad

Ethical Hacking

May 2022 - September 2022

• Perform web application pentesting.
• Perform mobile application pentesting.
• Documentations and writing reports.

Bug Hunting

Independent Security Researcher

May 2022 - Present

• Received Multiple Hall of Fames
• Received Multiple Swags
• Received Multiple Acknowledgements
• Received couple of Acknowledgements from NCIIPC & CERT-In
• Looking forward to making more contributions to Secure the Digital Assets

Genpact, Hyderabad

Process Developer

Feb 2019 - April 2022

• Worked as a Process Developer - Digital Crime Unit (DCU) with the following job responsibilities:
• Maintain and improve upon, as necessary, the existing vulnerability management program, including maintenance of scanning tools and licensing, procedures, reporting, and client communications.
• Investigate and create cases for security threats while performing initial triage and escalate for further investigation and mitigation.
• Monitor Security Alerts and investigate phishing emails by leveraging tools such as Proofpoint or reported by the users.
• Scan the Internal/External Assets and report the security vulnerabilities and fix or patch them by co-ordinating with the assigned developers.

EC-Council, Hyderabad

Research Associate (Information Security)

July 2017 - August 2018

• Worked on Information Security projects and developed Courseware for Industry standard certifications like CEH, CND, ECSA of EC-Council.
• Tested iLabs and reported security vulnerabilities.