Advait Khatu

🔒 Cybersecurity Enthusiast | Vulnerability Assessment & Penetration Testing Specialist 🔒

👉 advaitkhatu28@gmail.com

🌍 Nahur Mumbai

LinkedIn Download Resume

Professional Summary

● Results-oriented cybersecurity professional with 3+ years of hands-on experience
● Identified and remediated 200+ crtical & High severity vulnerabilities across web app, mobile app, API, network, and cloud platform throughout my career
● Proven expertise in identifying and exploiting complex vulnerabilities using both manual techniques and automated tools
● Deep understanding of OWASP Top 10, MITRE ATT&CK framework
● Led Vulnerability Assessment and Penetration Testing (VAPT) initiatives, ensuring comprehensive security evaluations
● Coordinated with cross-departmental team for vulnerability resolution and retesting
● Reporting the summary to the board with metrics on open vulnerabilities with potential impact
● Identifying the best remediation approach to take based on tech stack being used
● Conducted impact-focused analyses to prioritize security improvements
● Delivered actionable VAPT insights to significantly strengthen clients security posture
● Demonstrated ability to integrate security into SDLC, reducing post-deployment vulnerabilities by 35% while maintaining development velocity

● Web App VAPT, Mobile App VAPT, and API VAPT (Manual & Automated) with proven remediation success
● Cloud Security (AWS): EC2, IAM, CloudTrail, Security Hub implementation and hardening
● Security Operations Center (SOC) Setup: Wazuh deployment and optimization
● Security-integrated SDLC
● Network Security & Infrastructure Audits with compliance alignment
● Source Code Review & Exploit Development
● Use Of Open-Source Tools for VAPT
● Windows & Linux on premise server hardening
● Security Reporting & Mitigation Strategy Development with measurable results

♟ Web App VAPT: BurpSuite
♟ Mobile Pentesting: MobSF, Frida, Objection, Ghidra, Drozer, Apktool, Frida-script, Magisk, Jadx, Burpsuite
♟ API Pentesting: Postman, BurpSuite, Astra
♟ AWS VAPT: ScoutSuite, CloudSploit, Prowler
♟ Cloud Posture Management Tool: Orca
♟ AI VAPT: Jadx-AI, VAPT Automation Using MCP Server using open source LLM
♟ AI Model LLM & MCP Server: Ollama, Training AI Model for VAPT, Open Web UI
♟ Automated Vulnerability Scanner: Nessus, Qualys, Acunetix, Nuclei, Netsparker
♟ AWS Services: EC2, IAM, Cloudtrail, Security Hub, loadbalancer, AWS WAF
♟ Source Code Review: Sonarqube
♟ Network Security: Nmap, Wireshark, Netcat
♟ AWS EC2 Implementation: Wazuh, Gophish, Peterreport
♟ Config Review Of Network Infra: Nipper, Manual Audit
♟ Scripting: Bash
♟ Use of Custom Open-Source Tools from GitHub
♟ SOC Tools: Wazuh, Microsoft Sentinel

NSE (National Stock Exchange).

Digilocker Mobile App

Web App VAPT, Mobile App VAPT, API VAPT, Network VAPT

Source Code Review

AWS VAPT

BurpSuite

SOC Implementation

Kissht | Information Security Engineer
Ring | Information Security Engineer

4/2024 - present

Skills:

Identified and remediated 50+ critical vulnerabilities in Kissht & Ring products like Web App, Mobile App, API, & Network by performing VAPT (vulnerability assessment and penetration testing) thus preventing potential effect on 500,000+ users
Led Vulnerability Assessment and Penetration Testing (VAPT) initiatives in Kissht & Ring
Worked with cloud posture management tool like orca for aws
Reduced post-deployment security issues by 35% by integrating security testing within SDLC
Delivered comprehensive VAPT reports that enabled engineering teams to resolve all critical findings within SLA timeframes
Identified 5+ critical business logic vulnerability that had direct effect on business
Ensured that all products and systems met RBI Guidelines
Automated VAPT by creating custom bash script & by use of open-source tools thus saving 25% time on manual testing
Worked closely with product, development, and operations teams to ensure vulnerability closure and ensure security best security practices were adopted

9USRcraft | Information Security Analyst

12/2022 - 3/2024

Led 12+ end-to-end VAPT engagements for financial institutions including Axis Capital, Axis Security, Motilal Oswal & ISON with 100% on-time delivery
Developed standardized testing methodologies that improved assessment efficiency by 25%
Partnered directly with client engineering teams to achieve 95% vulnerability closure rates within 30 days
Produced compliance-aligned vulnerability reports that helped clients meet regulatory requirements with minimal exceptions

Clients Managed

IMSI Staffing | NOC Engineer

9/2021 - 10/2022

Managed Bajaj Pan India network.

Maintained 99.9% uptime for critical network infrastructure across Bajaj's pan-India operations
Reduced network incident resolution time by 20% through optimized troubleshooting workflows

B.Sc. Information Technology, Vidyalankar School of Information Technology, Mumbai

Diploma in Electronics & Telecommunication, Vidyalankar Polytechnic

Secondary School, SVHS

● Risk Reduction: Identified and remediated 200+ critical and high severity vulnerabilities across multiple platforms, preventing losses for clients in fintech and enterprise sectors
● Operational Efficiency: Implemented SOC workflows using Wazuh that reduced security incident response time by 40% and improved threat detection accuracy by 60%
● Development Security: Integrated security into SDLC processes, decreasing post-deployment vulnerabilities by 35% while maintaining development velocity
● Infrastructure Protection: Performed firewall audits and server hardening that increased compliance with security standards from 65% to 90%
● Client Satisfaction: Delivered professional-grade VAPT reports with actionable remediation steps, resulting in 95% vulnerability closure rates within 30 days