Ruturaj Gawande
Summary
Detail-oriented MBA candidate in Information Security with expertise in red teaming, penetration testing, and cyber threat intelligence. Skilled in conducting social engineering assessments and monitoring dark web activities for data leaks. Strong knowledge of GRC frameworks (ISO 27001, NIST, OWASP) and data analytics tools (Power BI, Python). Focused on applying technical skills to enhance third-party risk management efforts.
Overview
1
1
Certification
1
1
year of professional experience
Work History
Cyber Risk Analytics & GRC Implementation
SCIT Academic Project
02.2026 - 02.2026
- Aligned security findings with NIST and ISO 27001 controls to support GRC initiatives and enhance client reporting.
- Developed executive dashboards in Power BI to visualize risk exposure and enrollment trends for stakeholder insights.
- Developed an intrusion detection model using Random Forest (Python) to predict network attacks, achieving 77.7% accuracy and reducing false positives by 64%.
Splunk SIEM & Threat Intelligence
SCIT Academic Project
12.2025 - 12.2025
- Ingested 100k+ Windows security events to detect brute-force attempts (Event ID 4625) and file integrity violations, enhancing overall security monitoring.
- Developed real-time dashboards for monitoring privileged access and potential data leaks, improving visibility into the threat landscape.
Security Assessment & Red Teaming
Qadit Systems & Solutions
03.2025 - 07.2025
- Conducted red team exercises including social engineering assessments on web/mobile platforms (InsecureBankV2, LearnEngg), resulting in 85% bypass of standard controls and highlighting weaknesses in security posture.
- Exploited infrastructure vulnerabilities (Ghostcat, vsftpd backdoor) using Metasploit, illustrating real-world impact on IT environments and informing remediation strategies.
- Executed dark web monitoring simulations with OSINT tools to detect data leaks and credential exposures across multiple threat actor forums, enhancing situational awareness for potential threats.
Web Application Penetration Testing (OWASP Top 10)
Qadit Systems & Solutions
03.2025 - 07.2025
- Identified critical flaws including SQLi, XSS, and session fixation using Burp Suite and Nmap, enhancing overall application security.
- Collaborated with cross-functional teams to implement security headers (HSTS, X-Frame-Options) and remediate high-risk findings, significantly reducing attack surface.
Education
MBA - Information Technology & Business Management (Information Security)
SCIT
Pune03-2026
BBA - Global e-Business
MIT-WPU
Pune04-2023
Skills
- Offensive security
- Phishing simulations
- Cyber threat intelligence
- Metasploit and Burp Suite
- Nmap and Nessus
- OWASP ZAP and SQLMap
- GOBuster and adversary behavior analysis
- Risk management
- NIST compliance
- GDPR readiness
- Threat data analysis
- Scripting for automation
- Security reporting tools
- Technical documentation
- Stakeholder engagement
Achievements
Organized National-level Futsal Tournament (Managed 32+ teams, Rs. 200k+ prize pool - demonstrating cross-functional collaboration).
Technical Core Competencies
- Red Teaming & Offensive Security: Social Engineering, OSINT (Maltego), Phishing simulations.
- Penetration Testing Tools: Metasploit, Burp Suite, Nmap, Nessus, OWASP ZAP, SQLmap, Gobuster.
- Cyber Threat Intelligence (CTI): Dark web monitoring, adversary behavior analysis, CVE/CWE mapping.
- GRC & Frameworks: ISO 27001 (Lead Auditor), NIST, OWASP Top 10, GDPR readiness.
- Data Analytics & Visualization: Python (Pandas, Scikit-learn), Power BI, Tableau, Excel (Pivot Tables/Charts).
- Operating Systems: Windows, Linux (Kali, Ubuntu), Unix.
Languages
German
Elementary (A2)
A2
Certification
- ISO 27001 Lead Auditor - DNV GL
- Data Science for Business - IIT Madras
- Artificial Intelligence & Data Science - Ministry of MSME, Govt. of India.
Work Preference
Salary Range
₹950000/yr - ₹1600000/yrTimeline
Cyber Risk Analytics & GRC Implementation
SCIT Academic Project
02.2026 - 02.2026
Splunk SIEM & Threat Intelligence
SCIT Academic Project
12.2025 - 12.2025
Security Assessment & Red Teaming
Qadit Systems & Solutions
03.2025 - 07.2025
Web Application Penetration Testing (OWASP Top 10)
Qadit Systems & Solutions
03.2025 - 07.2025
MBA - Information Technology & Business Management (Information Security)
SCIT
BBA - Global e-Business
MIT-WPU