SHARATH M

Results-driven Cyber Security Engineer with hands-on expertise in application security reviews, penetration testing, and vulnerability assessment. Demonstrated proficiency in identifying and mitigating security risks throughout the software development lifecycle using threat modeling, SAST/DAST tools, and secure coding practices. Certified in offensive security methodologies (CEH v13, OHSE) with practical experience in DNS/DHCP protocol security, OWASP Web/API Top 10 mitigation, and security-focused Python automation. Proven ability to collaborate with development teams to embed security into agile workflows and enforce compliance frameworks including ISO 27001, NIST, and PCI DSS.

Active participant in cybersecurity forums like Hack the Box, TryHackMe , CyberDefenders , LetsDefend .

Brute-force Attack Detection & Log Analysis (SOC Simulation)

Tools: Splunk Enterprise, Universal Forwarder, Sysmon, Windows Event Logs, PowerShell
Skills: SIEM Configuration, Log Analysis, Incident Detection, MITRE ATT&CK (T1110)

• Designed and deployed a two-system Splunk lab (Windows host + VM) to simulate a real-world SOC environment.
• Installed and configured Splunk Universal Forwarder on a Windows endpoint to collect Security and Sysmon logs and forward them to the Splunk indexer.
• Created detection rules in Splunk SPL to identify brute-force and failed login attempts (Event ID 4625), correlating multiple events within 10 minutes.
• Built interactive dashboards visualizing top source IPs, targeted users, and event timelines to improve investigation speed.
• Generated a complete incident report aligned with NIST 800-61 and mapped detection logic to MITRE ATT&CK T1110 (Brute Force).
• Demonstrated practical SOC analyst workflows — alert triage, log correlation, and response documentation — replicating enterprise blue team operations.

Continuous Facial Authentication Using Fuzzy System

• The emergence of continuous facial authentication using fuzzy logic points to success in protecting user data in the driver environment.

• This new approach transforms user authentication by integrating  facial recognition into log-in, log-in and log-out processes.

• When users create an account, their facial profile is carefully recorded and associated with DriveSpace, providing ongoing verification throughout

• The system not only identifies the user, but is also vigilant, immediately cutting  off the connection when it detects illegal or inappropriate behavior

Advanced Web Application Penetration Test

• Performed OWASP-aligned testing on Juice Shop and other apps; found SQLi, XSS, and SSRF.
• Produced CVSS-scored reports and mitigation advice.

passionate photographer and editor