┌──(viswa㉿kali)-[~]
└─$ cat about.txt
Name : Viswa
Role : Security Engineer | Red Teamer | Bug Hunter
Focus : Offensive Security | Cloud Security | SIEM
Platform : Linux | AWS | Azure
Status : [ ██████████ ] Always LearningElectronics & Communication Engineer turned full-stack Cybersecurity practitioner.
- 🔭 Currently building EDR / XDR detection pipelines and end-to-end observability stacks
- 🔥 Core expertise —
Wazuh·Splunk·ZTNA·Windows AD·Fortigate - 🛡️ Serving SMBs & Enterprises as a security consultant — 4+ clients
- 📊 Monitoring 1000+ endpoints via SOCFortress CoPilot (14 connectors)
- 🏅 Holding 10+ active certifications across security, cloud & networking
- 💬 Ask me about Bug Bounty · Penetration Testing · SIEM Engineering
- ⚡ Fun fact: Hack → Code → Repeat
| 🔢 Stat | 💥 Value |
|---|---|
| 🏅 Certifications | 10+ active |
| ☁️ Cloud Platforms | 3 (Azure · AWS · GCP) |
| 🖥️ Monitored Endpoints | 1000+ |
| 🔌 SOC Connectors | 14 (CoPilot) |
| 🐧 Attack OS | Kali Linux |
| 💻 Primary Machine | VISWA-SPACE (Win 11) |
| 🤝 Clients | 4+ (SMBs & Enterprise) |
| Skill | What I do |
|---|---|
| SOC operations | 24/7 monitoring, alert triage, incident response, escalation and clear alert-to-report communication |
| SIEM engineering | Deployment, multi-tenant design, RBAC and data isolation, log onboarding, retention and sizing |
| Detection engineering | Custom rules and decoders mapped to MITRE ATT&CK, detection tuning and false-positive reduction |
| Threat detection use cases | Persistence, lateral movement, credential abuse, living-off-the-land activity, suspicious PowerShell, USB and shadow IT |
| Endpoint security | Windows and Linux endpoint baselines, telemetry tuning, file integrity monitoring, active response |
| Active Directory security | Audit policy, hardening, GPO-based logging and rollout, CIS gap remediation |
| Compliance and configuration assessment | Custom policy checks for misconfigurations and unauthorized or end-of-life software |
| Network detection | Traffic visibility design, IDS alerting, threat intelligence enrichment |
| Threat intelligence and attack surface | IOC enrichment, external attack surface monitoring |
| Security observability | SOC dashboards, alerting, uptime and metrics monitoring |
| Security data engineering | Log pipelines from SIEM to data lake for analytics |
| Cloud security | AWS and Azure log ingestion, identity and misconfiguration review |
| Automation and scripting | Python, PowerShell and Bash for deployment, detection and response |
| Skill | What I do |
|---|---|
| Reconnaissance and OSINT | Passive and active recon, subdomain and asset discovery, technology fingerprinting |
| Network penetration testing | Host discovery, port and service enumeration, vulnerability validation, firewall and filtering analysis |
| Web application testing | OWASP Top 10: injection, broken authentication and access control, XSS, CSRF, SSRF, file upload, insecure deserialization, security misconfiguration |
| API security testing | Authorization flaws (BOLA/IDOR), mass assignment, rate limiting, token and session weaknesses |
| Active Directory attacks | Enumeration, Kerberos and NTLM abuse, credential attacks, privilege escalation and lateral movement paths |
| Privilege escalation | Linux and Windows misconfigurations, weak permissions, credential exposure |
| Cloud misconfiguration review | Storage exposure, over-permissive IAM, exposed services and secrets |
| Exploitation and post-exploitation | Controlled exploitation, pivoting, evidence collection within scope |
| Vulnerability assessment | Scanning, manual validation, risk rating and prioritization |
| Reporting and remediation | Clear findings with evidence, impact, CVSS-based severity and fix guidance for technical and management readers |
| Purple teaming | Turning attack techniques into detections and validating that alerts fire |
Methodology: Scope → Recon → Enumerate → Exploit → Post-exploit → Report → Retest
Frameworks I work with: MITRE ATT&CK · OWASP Top 10 · PTES · CIS Benchmarks · CVSS
- Multi-tenant SIEM / SOC: isolated roles, users and dashboards per client
- Windows detection baselines: workstation and domain controller configs with custom rules and decoders
- AD hardening toolkit: audit policy, GPO automation, multi-domain agent deployment
- Security data pipeline: SIEM telemetry into a data lakehouse for analytics
- Observability stack: combined SOC dashboards merging alerts with infrastructure metrics
- LLM-assisted investigation: AI connectors on top of the SIEM data layer
Write-ups and sanitized configs: github.com/20MH1A04H9/WAZUH
| Badge | Certification |
|---|---|
 |
Certified Ethical Hacker (CEH V13) |
 |
AWS Certified Cloud Practitioner |
 |
Microsoft Azure Fundamentals |
 |
Red Hat System Administration (RH124) |
 |
CISCO Cybersecurity Essentials |
Internship Certificates: Cyber & Forensics Security Solutions · Prodigy InfoTech · EduSkills Foundation (Cloud)
Platforms : TryHackMe · HackTheBox · HTB Academy
Focus Areas : Web Application · API Security · Network Enumeration · Active Directory
Methodology : Recon → Enumerate → Exploit → Report → Repeat
- 🌐 Portfolio: saiviswanath064.github.io
- 📝 Blog: Medium, weekly posts on SOC operations, AD hardening and detection engineering
- 💼 LinkedIn: www.linkedin.com/in/saiviswanath064/
"The quieter you become, the more you are able to hear." — Kali Linux