Certifications
Yaswanth Surya Chalamalasetty
Hyderabad
Summary
CREST-certified Penetration Tester with four years of experience across web application and API penetration testing,
internal and external infrastructure assessments, Active Directory security testing, cloud security configuration reviews,
vulnerability assessment and security operations. Hands-on experience with Burp Suite Professional, Nmap, Nessus and
Metasploit, with a strong focus on manual testing, vulnerability validation, proof-of-concept development and remediation
verification. Experienced in AWS and Microsoft Azure security reviews, CVSS-based risk assessment, technical and
executive reporting, stakeholder communication and retesting, supported by an MSc in Cybersecurity and practical
exposure to both offensive and defensive security disciplines.
Overview
6
6
4
4
years of professional experience
5
5
years of post-secondary education
Education
Masters Of Science - Cyber Security
Coventry University
Coventry UK 09.2025 - 09.2026
Bachelor in Engineering - Computer Science Engineering
ISBM University
Chhattisgarh, India 06.2018 - 05.2022
Skills
Web & API Security
Cloud Security
Active Directory
Infrastructure Security
Security Operations & Defensive Security
Consulting & Delivery
Certification
- Secure Computer User (EC-Council)
- Ethical Hacking (EC-Council)
- Network Defender (EC-Council)
- Computer Hacking and Forensic Investigation (EC-Council)
- EC-Council Security Analyst (EC-Council)
- Certified SOC Analyst (EC-Council)
Achievements
- COCON Kerala CTF — 6th Runner-Up
- TryHackMe — Top 3% worldwide
Completed 102 TryHackMe rooms
Earned 19 TryHackMe badges - Equinox 2021 “Incognito” — IIIT Lucknow participant
- Delivered cybersecurity guest lectures at VIT Vellore, VIT Chennai, Hindustan University, and Christ University
- Conducted cybersecurity workshops and faculty development programs
- Led VAPT and security-audit engagements for banking clients
- Supported SOC monitoring and security operations for banking and enterprise environments
- Delivered enterprise security assessments and remediation guidance
Affiliations
- Providing SOC and VAPT services to Bharathiya Sahakara Bank Niyamathi
- Performed VAPT and compliance audit at Bharathiya Sahakara Bank Niyamathi
- Performed VAPT and compliance audit at Muslim Co-operative Bank
- Performed IS and VAPT audit at Merchant cooperative bank
- Providing Threat Intelligence Services to Jaguar Tech Park
Work History
Penetration Tester
Technomold IT solutions
India
03.2023 - 01.2025
- Conducted end-to-end penetration testing across web applications, APIs, internal networks, external infrastructure, and cloud environments.
- Performed manual security testing for authentication, authorization, session management, access control, business logic flaws, and common web vulnerabilities.
- Assessed Windows and Active Directory environments for privilege escalation, credential exposure, insecure configurations, and attack paths.
- Performed AWS and Azure security reviews covering IAM, permissions, network exposure, storage security, secrets, logging, and monitoring.
- Used Burp Suite, Nmap, Nessus, Metasploit, and supporting scripts for reconnaissance, enumeration, validation, and exploitation testing.
- Produced technical findings with evidence, CVSS-based risk ratings, proof-of-concept details, and remediation recommendations.
- Worked with development, infrastructure, and security teams to validate fixes and perform retesting.
- Supported junior analysts and contributed to improving penetration-testing methodology and reporting quality.
Independent Cybersecurity Consultant
Cybershields and IT solutions
01.2024 - 08.2025
- Provided independent cybersecurity consulting across VAPT, SOC operations, and information-security assessments for banking and enterprise clients.
- Led and executed information-security audits and penetration-testing engagements for cooperative banking environments.
- Conducted web application, API, infrastructure, and vulnerability assessments across client environments.
- Delivered SOC monitoring and security-operations support for selected banking and enterprise environments.
- Performed security-event analysis, vulnerability validation, control reviews, and remediation verification.
- Assessed enterprise security posture and identified gaps across infrastructure, applications, and operational controls.
- Produced technical findings, risk summaries, and remediation recommendations for client stakeholders.
- Supported banking and enterprise clients with security assurance, vulnerability prioritisation, and defensive-control validation.
Security Analyst
Technomold IT solutions LTD
India
03.2021 - 03.2023
- Monitored and investigated security events using Splunk SIEM, CrowdStrike EDR, and Microsoft 365 Defender.
Analysed endpoint, firewall, WAF, IDS/IPS, web-server, and database security telemetry. - Investigated phishing attempts, suspicious authentication activity, malware alerts, and credential-based attacks.
- Supported incident-response activities, root-cause analysis, containment, and remediation validation.
- Performed vulnerability validation and attacker-perspective testing to assess defensive security controls.
- Assisted with SIEM tuning, alert investigation, false-positive reduction, and detection improvement.
- Worked with infrastructure and security teams to investigate incidents and strengthen defensive controls.
- Built practical experience across SOC operations, threat investigation, vulnerability assessment, and security monitoring.
Timeline
Masters Of Science - Cyber Security
Coventry University
09.2025 - 09.2026
Independent Cybersecurity Consultant
Cybershields and IT solutions
01.2024 - 08.2025
Penetration Tester
Technomold IT solutions
03.2023 - 01.2025
Security Analyst
Technomold IT solutions LTD
03.2021 - 03.2023
Bachelor in Engineering - Computer Science Engineering
ISBM University
06.2018 - 05.2022