Shubh A. Email & Phone Number

London, Gb

Global

Spearheaded the creation and development of the WCS group's advanced cybersecurity training platform called simUphish. I led the team in designing realistic phishing simulations and interactive training modules, ensuring the platform's effectiveness in reducing phishing incidents. Further focused on securing strategic partnerships, and driving the company's market expansion. Under my leadership, simUphish successfully trained over 10,000 employees across various industries and gained recognition for innovation in Cyber Awareness SaaS by several CISOs.

Global

Structured and launched White Coast Security with one offline client through web application; established a monetization and conversion strategy, provided insights about business development through client engagement, and created operational procedures and workflow planning.

I have discovered and disclosed high-impact security vulnerabilities in a diverse range of systems, significantly enhancing the cybersecurity postures for over 15 organizations. Through meticulous research and analysis, I have identified critical weaknesses that could potentially be exploited, thereby averting substantial risks.In addition to identifying these vulnerabilities, I have authored comprehensive technical reports that detail the nature of each discovered vulnerability, the potential exploits, and the recommended strategies for effective mitigation. These reports have been instrumental in guiding organizations to bolster their security frameworks and protect their digital assets.Furthermore, I maintain an up-to-date knowledge of emerging threats and attack vectors, continually adapting my research methodologies to effectively counter the ever-evolving landscape of cybersecurity risks. This proactive approach ensures that my contributions remain relevant and impactful in the face of new and sophisticated cyber threats.

I conducted a thorough evaluation of existing vulnerabilities in Windows 7 within the Electronic Chart Display and Information System (ECDIS), revealing a concerning 60% probability of the system being hacked. This assessment highlighted significant security risks that required immediate attention to safeguard critical maritime navigation systems.To address these vulnerabilities, I adapted and installed a driver in a virtual machine running ECDIS. By understanding the system's functionality, I was able to intercept serial communications and inject secure data into the ECDIS. This proactive approach effectively fortified the ECDIS machine, rendering it nearly 100% hack-free. This achievement demonstrates my capability to enhance system security through innovative solutions and a deep understanding of complex systems.

I have actively participated in bug bounty programs and responsible disclosure initiatives, fostering positive relationships with the broader cybersecurity community. These activities not only contributed to enhancing the security of various systems but also built a network of trust and collaboration among security professionals.In addition, I am committed to continuous learning and skills development, ensuring that I stay current with the latest tools and techniques in the field of security research. By keeping abreast of cutting-edge advancements, I am able to apply the most effective and innovative solutions to emerging cybersecurity challenges, thereby maintaining a high standard of professional excellence.

I have demonstrated expertise in reverse engineering and code analysis to uncover hidden vulnerabilities, significantly bolstering the overall security posture of the organization. My ability to dissect and understand complex code has been instrumental in identifying and addressing potential threats that might otherwise go unnoticed.Additionally, I have engaged in responsible disclosure by promptly reporting identified vulnerabilities to vendors. This proactive communication ensures that timely patches and updates are implemented, thereby mitigating risks and enhancing the security of the affected systems. My commitment to responsible disclosure reflects a dedication to improving the broader cybersecurity landscape and fostering trust within the industry.

New Delhi, Delhi, India

I achieved a significant milestone by earning a place in the Hackthebox Hall of Fame, attaining the status of Guru and ranking among the top 100 hackers globally and the top 10 in India out of 300,000 participants on the platform. This accomplishment underscores my advanced skills and dedication to the field of cybersecurity.Through my participation in Hackthebox, I assessed and identified various red teaming methodologies, successfully cracking over 50 machines and challenges. This experience has greatly expanded my knowledge and proficiency in real-life penetration testing, equipping me with the expertise to effectively tackle complex security assessments and enhance organizational defenses.

I have successfully implemented, organized, and upgraded security measures and controls for the infrastructure, resulting in a decrease of vulnerabilities to zero and significantly enhancing the overall security of the platform. This rigorous approach to security management has fortified the infrastructure against potential threats and established a robust defense mechanism.In addition, I have compromised and exploited approximately 25 machines within the digital system, extracting critical information and infiltrating its architecture. Throughout this process, I meticulously documented each step, providing a comprehensive account of the techniques and methodologies employed. This detailed documentation not only serves as a valuable resource for future security assessments but also contributes to the continuous improvement of the platform's security posture.

New Delhi, Delhi, India

I have acquired a solid foundation in cybersecurity principles, methodologies, and best practices through hands-on experience as an Information Security Analyst. This role has equipped me with practical knowledge of various cybersecurity tools and technologies, including intrusion detection systems (IDS), vulnerability scanners, and Security Information and Event Management (SIEM) platforms. My expertise in these areas has been instrumental in enhancing the security infrastructure and ensuring robust protection against threats.Additionally, I have contributed to cultivating a security-aware culture within the organization by sharing valuable insights with colleagues, promoting cybersecurity awareness, and actively participating in employee training initiatives. These efforts have helped to foster a proactive approach to cybersecurity, encouraging everyone to adopt best practices and stay vigilant against potential risks.