Crs12

Chirag R Shetty

Focused Roles:

Breaking systems to build them stronger
Building hands-on expertise in identifying and exploiting vulnerabilities, with practical experience in pentesting and security monitoring.

About Me

Profile

Detail-oriented cybersecurity graduate with hands-on experience in SOC analysis, vulnerability assessment, penetration testing, and AI-driven security practices. Proficient in industry-standard tools including Burp Suite, Nmap, Metasploit, and Splunk, with strong practical knowledge of MITRE ATT&CK framework and OWASP Top 10 standards. Demonstrated ability to identify, exploit, and document security vulnerabilities across network and web application environments. Ranked in the top 7% globally on TryHackMe with 5200+ points across 60+ hands-on labs covering SOC operations, VAPT, and AI security. Backed by multiple industry certifications including Google Cybersecurity and IBM Ethical Hacking, with a growing project portfolio demonstrating real-world security operations expertise.

Skills

  • Log Analysis
  • Generative AI
  • Incident Response
  • Operating Systems
  • Vulnerability Management
  • Computer Networks
  • Threat Detection
  • Pentration Testing
  • Firewall Configuration

Tools

  • Kali Linux
  • Wireshark
  • Splunk
  • Shell
  • Metasploit
  • Nmap
  • Palo Alto
  • Maltego (OSINT)
  • VirusTotal
  • Suricata
  • Snort
  • Burp Suite

Educational Qualifications

Bachelor's of Computer Applications (BCA) - Jain University

Jul 2023 - Present
  • CGPA: 8.00
  • Course Framework: Computer Networks, Operating Systems, C, Java, Python

Pre-University - St Joseph's Pre-University College

Jun 2021 - May 2023
  • Aggregate: 78%

10th - Sri Devaraj Urs International Residential School

Jun 2020 - Mar 2021
  • Aggregate: 76%

Achievements

  • Achieved a Top 7% global rank on TryHackMe by completing 55+ hands-on labs, gaining 5000+ points, and building practical experience in web exploitation, SOC labs, AI security.

Virtual Experience

  • Analysed simulated security incidents to identify attack vectors and recommend mitigation strategies.
  • Assessed network architecture and proposed improvements to strengthen organizational defenses.
  • Developed incident response documentation aligned with industry frameworks.

Workshops, Training

  • Participated in a cybersecurity conference covering ethical hacking foundations, security principles, and practical analysis techniques.
  • Completed CompTIA Server+ training with hands-on exposure to server administration, infrastructure fundamentals, and Cisco Packet Tracer.
  • Gained foundational knowledge of next-generation firewall concepts including security policies, network segmentation, NAT, and traffic monitoring using Palo Alto Networks technologies.

Projects

Cloud Threat Intelligence & Attack Attribution Platform(In Progress)

  • Engineered a Cloud Threat Intelligence & Attack Attribution Platform using AWS CloudTrail, VPC Flow Logs, Python, and external threat intelligence feeds to automate IOC ingestion, enrichment, correlation, and real-time detection of malicious cloud activities.
  • Developed a security analytics dashboard featuring threat scoring, geolocation analysis, reputation-based attack attribution, MITRE ATT&CK mapping, incident reporting, and threat classification to support SOC investigations and cloud security operations.

Result:Delivered a scalable cloud security monitoring solution that bridges threat intelligence, detection engineering, and attack attribution for enhanced security operations..

AI-Powered Log Analysis using Splunk

  • Developed an AI-Powered SOC Security Analytics Dashboard using Splunk, Python, Streamlit, and Gemini AI to analyze and investigate security events.
  • Implemented threat detection, risk scoring, severity classification, and MITRE ATT&CK mapping for SSH brute-force attacks, root account attacks, and account compromise scenarios.
  • Integrated Splunk SDK and custom SPL queries to process 1,000+ security events and generate interactive dashboards, AI-assisted incident analysis, and CSV-based downloadable security reports.
  • Result: Reduced manual analysis time by up to 60%.

End-to-End VAPT and Exploitation using Nmap, Nessus and Metasploit

  • Conducted reconnaissance and network scanning using Nmap to identify active hosts and open ports.
  • Performed vulnerability assessment using Nessus and prioritized risks based on severity.
  • Exploited identified vulnerabilities using Metasploit to gain system access.
  • Executed post-exploitation activities including privilege escalation, system enumeration, and session handling.

Result: Documented findings and remediation strategies to improve overall system security.

Web Application Security Testing using DVWA and Burp Suite

  • Conducted web application security assessment on DVWA using Burp Suite, identifying 4+ critical vulnerabilities including SQL Injection and Cross-Site Scripting (XSS).
  • Successfully exploited multiple web vulnerabilities in a controlled lab environment, demonstrating real-world attack scenarios and impact on application security.
  • Mapped identified issues to OWASP Top 10 standards and proposed practical remediation strategies.

Result: Improved the overall security posture through structured remediation recommendations.

CRS-12 E-Portfolio Website

  • Developed and deployed a responsive cybersecurity portfolio website using HTML, CSS, and JavaScript, featuring smooth animations, glassmorphism UI, and optimized performance for cross-device compatibility.
  • Showcased VAPT and SOC projects through an interactive portfolio with GitHub integration, implementing modern UI components and leveraging AI-assisted development to accelerate design and coding efficiency.

Result: Delivered a polished personal brand site with professional project presentation and consistent cross-device user experience.