Cybersecurity Analyst — Security Operations | Vulnerability Assessment | Application Security
Cybersecurity professional with hands-on experience across security monitoring, incident investigation, vulnerability assessment, and application security testing. Experience developed through hands-on lab work, an active on-the-job training placement, and documented project repositories covering log analysis, incident reconstruction, blockchain transaction tracing, DAST-based vulnerability assessment, and manual web application security testing.
Security Operations & Monitoring
Alert investigation, log analysis (Windows Event Logs, Sysmon), IOC analysis, incident timeline reconstruction, MITRE ATT&CK mapping.
Vulnerability Assessment & Application Security
Black-box DAST, OWASP Top 10 methodology, manual vulnerability validation, SQL injection testing, DOM-based open redirect testing, security header review, risk-prioritized reporting.
Digital Forensics & Blockchain Investigation
Public blockchain transaction tracing, evidence handling (SHA-256 hashing, evidence register, chain of custody), reproducible analysis, confidence-labelled findings that separate confirmed evidence from interpretation.
Network Analysis
Traffic analysis and protocol-level investigation supporting incident correlation (Wireshark), network reconnaissance (Nmap).
Tools: Python Kali Linux Wireshark Nmap OWASP ZAP Burp Suite Docker VMware
SOC Alert Monitoring & Log Correlation
SOC investigation built in a virtual lab (Windows + Kali Linux). Used a Python-based incident analyzer to parse Windows Event Logs and Sysmon telemetry, reconstruct a chronological incident timeline, extract and correlate IOCs, and map observed activity to MITRE ATT&CK. Network activity cross-checked with Wireshark.
Web Application Security Assessment
Black-box DAST assessment of OWASP Juice Shop (Docker) using OWASP ZAP. Automated findings were manually validated against the OWASP Top 10, including documented SQL injection testing and a security header review. Delivered as a risk-prioritized report with remediation recommendations.
Manual web application security assessment of an authorized PortSwigger Web Security Academy training lab. Used Burp Suite to capture and manipulate HTTP requests, identified and validated the url parameter on the /post endpoint, and confirmed the DOM-based open redirect through browser execution. Documented CWE-601 mapping, evidence, qualitative risk assessment, and remediation recommendations.
Coincheck NEM Theft Investigation (2018)
Independent, reproducible blockchain investigation of the January 2018 Coincheck exchange hack, built from public statements and data I collected from a public NEM node. Traced 526,300,010 XEM across 11 transfers out of the exchange wallet and 523,000,000 XEM onward to eight addresses, reconstructed the timeline, and analysed the single-signer hot-wallet weakness. Delivered an incident report, executive summary, mitigation plan, presentation deck, and an evidence portfolio with SHA-256 hashes, chain of custody, and a finding-to-evidence matrix. Findings are labelled Confirmed, Strongly supported, Interpretation, or Unknown, and a data-processing error found during self-review was documented and corrected.
Cybersecurity Specialist — On-the-Job Training
First Quadrant Labs · Jul 2026 – Present
Ongoing 6-month placement covering controlled security assessments, web application security testing, vulnerability assessment, and technical documentation, including black-box DAST, manual validation, OWASP Top 10 methodology, and remediation reporting.
Also completing a cybersecurity program through the Boston Institute of Analytics (BIA), currently in progress.
- Bachelor of Computer Applications (BCA) — DY Patil University (In Progress)
- Diploma in Information Technology — Navjeevan Polytechnic, Mumbai (79.07%)
- LinkedIn: linkedin.com/in/kshitij-randhire-750b97293
- GitHub: github.com/kshitij-soc