CYBER SECURITY ANALYST Pune, Maharashtra

Lingeshwar Kulal

VAPT • Web Security • Cloud Security

Cyber Security Analyst with hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), web application security, network security, cloud security, security monitoring, and incident response. Skilled in Burp Suite, Nmap, Wireshark, Kali Linux, AWS IAM, Amazon CloudWatch, and AWS CloudTrail.

View My Work Download Resume
ENTERPRISE SOC ENVIRONMENT Active Defense • Telemetry Flow
ABOUT PROFESSIONAL BACKGROUND

Security Analyst with Hands-on Technical Depth

Grounded in practical assessments, cloud access controls, and authorized testing methodologies.

Core Security Foundations & Approach

I am a Cyber Security Analyst based in Pune, Maharashtra, with practical experience spanning Vulnerability Assessment and Penetration Testing (VAPT), web application security, network analysis, and cloud infrastructure security.

My professional experience encompasses testing web applications against the OWASP Top 10 vulnerabilities using Burp Suite, conducting in-depth network discovery and traffic analysis with Nmap and Wireshark, and enforcing cloud security best practices across Amazon Web Services (AWS).

In cloud environments, I specialize in auditing AWS IAM configurations, enforcing the principle of Least Privilege, configuring Multi-Factor Authentication (MFA), monitoring resource activities through Amazon CloudWatch, and analyzing security-related events in AWS CloudTrail logs to detect anomalies and misconfigurations.

Vulnerability Assessment Penetration Testing (VAPT) OWASP Top 10 Web Security Network Analysis AWS IAM Hardening CloudTrail Log Analysis Security Monitoring Incident Response
VERIFIED PROFESSIONAL DETAILS
  • Current Role: Cloud Security Engineer • Bluella Pvt Ltd
  • Primary Specialization: VAPT, Web Security & Cloud Security
  • Core Certification: Certified Ethical Hacker (CEH v13)
  • Education: MCA (Trinity Academy of Eng.), B.Sc. Electronics
  • Primary Location: Pune, Maharashtra, India
  • Cloud Focus: AWS IAM, CloudWatch, CloudTrail, VPC, EC2, S3
Security Principle
"Identifying vulnerabilities proactively and establishing defense-in-depth through least-privilege access, verified baselines, and structured remediation."
TECHNICAL COMPETENCIES

Verified Technical Skills & Security Tools

Organized systematically into professional domains strictly as supported by technical experience and credentials.

Cyber Security

Core methodologies & practices
Vulnerability Assessment Penetration Testing (VAPT) OWASP Top 10 Web Application Security Security Monitoring Incident Response

Security Tools

Assessment & testing suite
Burp Suite Nmap Wireshark Kali Linux

Cloud Security

IAM governance & posture
AWS IAM Multi-Factor Authentication (MFA) Least Privilege Access Cloud Monitoring Security Best Practices

Cloud Technologies

AWS service architecture
Amazon EC2 Amazon S3 Amazon VPC Amazon CloudWatch AWS CloudTrail

Network Security

Protocols, segmentation & firewalls
TCP/IP DNS DHCP VPN VLAN Firewall Fundamentals

Web / Infrastructure

Load balancing & web serving
Nginx Skudonet

Operating Systems

Platforms & administration
Linux Windows

Scripting & Automation

Routine security automation
Python (Basic) Bash (Basic)
EMPLOYMENT TIMELINE

Professional Experience

Chronological progression in cybersecurity analysis, cloud posture hardening, and threat mitigation.

CURRENT ROLE

Cloud Security Engineer

Bluella Pvt Ltd • Gurugram
March 2026 – Present

Core Responsibilities & Key Deliverables:

  • Performed security assessments on cloud and web environments to identify vulnerabilities and security misconfigurations.
  • Conducted web application security testing based on OWASP Top 10 using Burp Suite.
  • Monitored AWS resources using Amazon CloudWatch and reviewed AWS CloudTrail logs for security-related user activities and configuration changes.
  • Reviewed AWS IAM users, groups, roles, policies, and permissions to improve access security and support Least Privilege principles.
  • Used Nmap and Wireshark during network discovery, traffic analysis, and security assessments.
  • Identified security issues and shared remediation recommendations with the security team.
  • Created basic Python scripts to automate routine security tasks.
  • Supported secure cloud and web application environments using AWS IAM, Nginx, and Skudonet.
AWS IAM Amazon CloudWatch AWS CloudTrail Burp Suite OWASP Top 10 Nmap Wireshark Python Nginx Skudonet

Security Analyst

SYSAP Technologies • Pune
July 2025 – February 2026

Core Responsibilities & Key Deliverables:

  • Performed Vulnerability Assessment and Penetration Testing (VAPT) on web applications and network environments.
  • Conducted network scanning and security assessments using Nmap and Wireshark.
  • Tested web applications using Burp Suite and OWASP Top 10 security methodologies.
  • Assisted in security monitoring and incident response activities.
  • Identified vulnerabilities and prepared vulnerability assessment reports with security recommendations.
  • Supported overall system and network security activities.
VAPT Burp Suite OWASP Top 10 Nmap Wireshark Incident Response Reporting
SECURITY CASE STUDIES

Hands-on Cybersecurity Projects

Practical security assessments and posture reviews conducted in authorized laboratory and cloud environments.

VAPT • OFFENSIVE / DEFENSIVE LAB LAB-01

Web Application VAPT Lab

OBJECTIVE:

Simulate reconnaissance, network surface enumeration, and web application vulnerability assessment within authorized cybersecurity lab environments.

Security Focus: OWASP Top 10, Port Scanning, Parameter Tampering
Technologies: Burp Suite, Nmap, Kali Linux
WHAT WAS PERFORMED:
  • Performed reconnaissance, network scanning, and web application security testing in authorized cybersecurity lab environments.
  • Practiced identifying common web application vulnerabilities based on OWASP Top 10 concepts.
  • Used Burp Suite and Nmap during vulnerability assessment and security testing activities.
PRACTICAL LEARNING & OUTCOME:

Deepened methodology for analyzing HTTP request/response payloads, intercepting application parameters, identifying exposed services, and drafting remediation guidance for common web application weaknesses.

Burp Suite Nmap Kali Linux OWASP Top 10
CLOUD SECURITY • ACCESS CONTROL LAB-02

AWS IAM Security Review

OBJECTIVE:

Audit AWS Identity & Access Management (IAM) configurations to eliminate privilege creep, enforce least privilege, and strengthen identity security.

Security Focus: Least Privilege Access, Multi-Factor Authentication (MFA), IAM Policies
Technologies: AWS IAM, AWS Management Console, JSON Policies
WHAT WAS PERFORMED:
  • Reviewed IAM users, groups, roles, and permissions to identify unnecessary or excessive access.
  • Applied Least Privilege principles while reviewing access permissions.
  • Configured IAM policies for secure access and enabled Multi-Factor Authentication (MFA) for user accounts.
PRACTICAL LEARNING & OUTCOME:

Established clean IAM boundary baselines, replaced overly permissive wildcard permissions (`*`) with granular resource-based policies, and enforced mandatory MFA on console logins.

AWS IAM Least Privilege MFA Enforcement Policy Hardening
SOC / AUDIT • LOG TELEMETRY LAB-03

AWS Security Monitoring & Log Analysis

OBJECTIVE:

Implement centralized visibility across AWS resources by capturing operational metrics and auditing API activities to identify anomalous behavior.

Security Focus: Threat Detection, API Activity Auditing, Alerting
Technologies: Amazon CloudWatch, AWS CloudTrail
WHAT WAS PERFORMED:
  • Monitored AWS resources using Amazon CloudWatch.
  • Reviewed AWS CloudTrail logs to track user activities and configuration changes.
  • Identified unusual login attempts and configuration changes and created basic monitoring alerts.
PRACTICAL LEARNING & OUTCOME:

Constructed actionable CloudWatch alarms triggered by security-critical events (such as unauthorized API calls, IAM policy modifications, and console logins without MFA) using CloudTrail audit trails.

Amazon CloudWatch AWS CloudTrail Log Analysis Audit Trails

Security Methodology & Architecture Inspector

CREDENTIALS & SIMULATIONS

Certifications & Professional Qualifications

Strictly verified certifications and industry simulations documented in professional records.

EC-Council

Certified Ethical Hacker (CEH v13)

Comprehensive certification validating core knowledge in ethical hacking phases, attack vectors, footprinting, reconnaissance, malware threats, and network defense countermeasures.

Ethical Hacking Attack Vectors Defense Techniques
Cisco

Cisco Networking Basics

Foundational principles of enterprise networking: TCP/IP stack architecture, IPv4/IPv6 addressing, subnetting, switching, router operations, and basic infrastructure security.

TCP/IP Subnetting Network Protocols
TryHackMe

Advent of Cyber 2025

24 consecutive days of intensive, hands-on defensive and offensive security scenarios covering web vulnerabilities, traffic inspection, memory analysis, and cloud security labs.

24 Days Completed Offensive Labs Threat Detection
Deloitte Australia

Cyber Job Simulation

Industry-standard simulation focused on enterprise cybersecurity analysis, forensic data review, incident assessment reporting, and risk mitigation communication.

Job Simulation Forensics Risk Advisory
Tata Group

Cybersecurity Analyst Job Simulation

Practical analyst simulation covering enterprise security event triage, vulnerability analysis prioritization, and tactical remediation advice for business systems.

Job Simulation Security Operations Triage
PRACTICAL ACHIEVEMENTS

Milestones & Hands-on Achievements

Grounded in explicit laboratory completions and rigorous cybersecurity challenges.

Completed 24 Days of TryHackMe Advent of Cyber 2025

Successfully solved 24 consecutive days of guided cybersecurity challenges, gaining direct practical exposure to both offensive penetration testing techniques and defensive detection engineering workflows.

TryHackMe Offensive & Defensive Continuous Practice

Hands-on Laboratory Mastery Across Multi-Domain Security

Strengthened practical, actionable knowledge in network security, web security, threat detection, incident response, and cloud security through structured, hands-on cybersecurity laboratories.

Network Security Threat Detection Cloud Security Labs
ACADEMIC FOUNDATION

Academic Background & Degrees

Formal computer applications and electronics education providing solid computing foundations.

Postgraduate Degree

Master of Computer Applications (MCA)

Trinity Academy of Engineering Pune, Maharashtra

Advanced computer science curriculum focusing on software engineering, computer networks, database management systems, operating systems, and computer security foundations.

Undergraduate Degree

Bachelor of Science (Electronics)

Rajaram College Kolhapur, Maharashtra

Core grounding in digital electronics, microprocessors, signal transmission, circuits, and low-level hardware computing principles.

TECHNICAL DOCUMENTATION

Security Writeups & Learning

Technical walkthroughs and lab writeups documenting vulnerability mechanics, Burp Suite workflows, and defense strategies.

Medium Published Writeup PortSwigger Web Security Academy

SQL Injection: WHERE Clause Allowing Retrieval of Hidden Data

A comprehensive technical walkthrough detailing how unsanitized user inputs within an application's SQL WHERE clause can be manipulated to bypass access filters and retrieve hidden database records.

VULNERABILITY CONCEPT: Improper input sanitization in product category filter allowing query structure tampering.
DEMONSTRATED PAYLOAD: ' OR 1=1 --
METHODOLOGY: Burp Suite request interception → Parameter tampering → Filter bypass verification.
PREVENTION / DEFENSE: Implementation of Parameterized Queries (Prepared Statements) & strict allow-lists.
View on Medium TryHackMe Profile
OFFICIAL DOCUMENTATION

Want the full story?

Download my complete, verified resume detailing my professional history at Bluella Pvt Ltd and SYSAP Technologies, certifications (CEH v13), and educational background.

Download Resume (PDF) Preview in Browser
Verified source: Lingeshwar_Kulal.pdf (Primary Truth Record)
DIRECT COMMUNICATION

Let's connect on cybersecurity, cloud security and security engineering.

Available for security assessments, cloud security consulting, and technical interviews.

Verified Contact Channels

Feel free to reach out directly via email or connect with me on LinkedIn for professional inquiries.

Official Email [email protected]
LinkedIn Profile linkedin.com/in/lingeshwarkulal2001
GitHub Repository github.com/LingeshwarKulal
TryHackMe Profile tryhackme.com/p/kulallingeshwar
Base of Operations: Pune, Maharashtra, India

Send a Direct Message

Client-side Protected