Deepak Modi

An Advance VAPT analyst professional with over 4.8 years of hands-on experience in various domains such as security testing and penetration testing. Strong knowledge of network architectures, operating systems and cybersecurity tools. Confident and communicative professional proficient in scripting paired with familiarity of Unix and Windows. Collaborative team player committed to working with businesses and organizations to identify and resolve security vulnerabilities and weaknesses affecting digital assets and computer networks.

Assisted in more than 70 VAPT consulting assignments and was adjudged as ‘Threat Hunter” by multiple companies for my support in finding vulnerability & security from outside intruders.

CEH(Certified Ethical Hacker)

1. Vulnerability Assessment Audit:-

Tools/Technologies: Qualys, Nexpose and Verodin

Responsibilities:

• Performed vulnerability scans by Qualys and compliance scans by Nexpose against entire network and worked with business units to remediate.

• Provided necessary mitigation for the identified vulnerabilities to the development teams, educate them on the vulnerabilities & their fixes follow up and escalate when necessary.

• Scheduled multiple session with platform owner to make sure all the findings remediate as per the ETA.

• Prepared central tracker of findings to track the status of findings.

2. Web Application Vulnerability Assessment & Penetration Testing:-

Tools: Acunetix, HP Fortify Code Analyzer, Nessus Professional, Burp Suite, Metasploit, NSE Script, Python Scripting, Shell Scripting.

Responsibilities:

• Prepared testing checklist, policies, use cases and documented the requirements from the client.

• Developed threat and vulnerability management policies and defined ROE (Rule of engagement).

• Performed validation checks on different servers, found loopholes and customized the code.

• Ensured that the development is at par with the detailed design. Ensured that the code developed is in compliance with quality standards.

• Performed static as well as dynamic vulnerability analysis.

• Manually handled the identification/analysis of critical vulnerabilities and exploited them in a non-destructive manner. Provided vulnerability assessment report to client as per requirement.

3. Internal & External Network Security Assessment:-

Tools/Technologies: Nessus Professional, Burp Suite, TestSSL, RouterSploit, Iotsploit, Metasploit, NSE Script, Python Scripting, Shell Scripting.

Responsibilities:

• Prepared testing checklist, policies, use cases and documenting the requirements from the client.

• Developed threat and vulnerability management policies and define Scope & ROE (Rule of engagement).

• Performed validation checks on different servers and find loopholes and customize the code accordingly.

• Identification of security flaws present in the environment.

• Understanding the level of risk for the organization.

• Help address and fix identified network security flaws. Manually handle the identification/analysis of critical vulnerabilities and exploiting them in a non-destructive manner. Provide vulnerability assessment report to client as per requirement in a non-destructive manner. Provide vulnerability assessment report to client as per requirement.

4. Enterprise Security & Risk Management:-

Tools/Technologies: Rapid7 Insight, Nmap, Burp Suite, Nessus Professional, Metasploit, Kali Linux Tools

Responsibilities:

• Performed static, dynamic, port, process and registry Analysis.

• Prepared testing checklist based on OWASP Top 10 and policies as per the requirement.

• Static and dynamic application security testing (SAST & DAST).

• Identify the Malicious process and trying to kill the process and provide solutions for system flaws.

• Conducted Security Assessment Test for Internal Network, External Network.

• Knowledge of protocols such as HTTP, FTP, DNS, DHCP, SMTP.

• Accomplished project goals on time, on budget and in alignment with corporate objectives.

5. Mobile Application Security Assessment:-

Tools/Technologies: SANTOKU O.S, BURP suite Professional, Genny Motion, Apktool adb, JD-gui, dex2ja,

Andrototak, APKscan, Drozer, MOBSF.

Responsibilities:

• Created the threat model for an application

• Performed static, dynamic testing.

• Prepared testing checklist based on OWASP Top 10 and policies as per the requirement.

• Static and dynamic application security testing.

• Acting upon discovered vulnerabilities for gaining sensitive information or performing malicious activities.

• Demonstration of the identified vulnerability for gaining privileges and attempting to become the super user.

• Created the detailed report about discovered vulnerabilities, such as overall risk rating, the associated technical risk, and description etc.

• Presented the findings with CERTIN team.

• Incident Triage, Evidence Gathering and analysis, Data ingestion and Data Analytics using System logs and event logs

Course:- B. Tech. (CSE)

Board:- Madhav University, Rajasthan

Year of Passing:- 2017

Course:- Diploma

University:-Sunrise University

Year of Passing:- 2014

Course:- 12th

School:- Saint N.N RSV

Year of Passing:- 2011

Course:- 10th

School:- Jesus & Marry Sec School

Year of Passing:- 2009