// About Me
NITHINYADAV

Security Engineer | Offensive Security | Detection & Response

Security engineer with hands-on IAM (JumpCloud), CASB (Netskope) and AWS experience, plus offensive security tooling in Python. Built an AI-driven SOC platform on Wazuh and a phishing-detection extension. Finalist (top 5 of 650+) at the Jain National Hackathon, Tech for Agriculture, with IBM.

+91 6363331908 Bengaluru, India
Direct PDF
Nithin Yadav — Security Engineer

Nithin Yadav

Security Engineer Intern · Wizowl Solutions

BCA Cybersecurity · 2027
// Experience

Professional Experience

Active hands-on industry roles in identity and access management, cloud security posture, and detection engineering.

Current PositionBengaluru, India

Security Engineer Intern

Wizowl Solutions

Sep 2026 – Present

Administer identity and access management in JumpCloud for 20 employees and 35 devices: user lifecycle, group-based access policies, SSO, MFA, device policies, LDAP/RADIUS.

Implemented and maintain Netskope CASB on AWS to monitor cloud app usage, enforce data-protection policies and flag risky or unsanctioned SaaS activity.

Enforce least-privilege access through role-based groups and periodic access reviews.

Investigate access anomalies and CASB alerts, and document remediation steps.

JumpCloudNetskope CASBAWSIAMSSOMFARBACLDAP/RADIUSDetection Engineering
// Skills

Technical Skills & Tools

Click any angular card or use arrow controls below to explore core competencies across IAM, defense & engineering.

Toolchain

Security Tools

Security Arsenal

Practical execution of industry-standard security toolsets for packet analysis, traffic inspection, proxy interception, and vulnerability verification.

NmapBurp SuiteMetasploitKali Linux
Development

Programming & Engineering

Development & Protocols

Authoring security automation, REST API backends, and containerized utilities with strong proficiency across foundational network and web application protocols.

PythonBashDockerFastAPI
Security Engineering

Security Engineering

Correlation & Remediation

Automating CVE/NVD vulnerability correlation, performing service/version fingerprinting, building security automation pipelines, and delivering structured remediation reporting.

CVE/NVD CorrelationService FingerprintingSecurity AutomationStructured Reporting
Cloud & IAM

IAM & Cloud Security

Identity & Cloud Protection

Hands-on identity and access governance across JumpCloud and Netskope CASB on AWS. Enforcing group-based access policies, SSO, MFA, RBAC, and LDAP/RADIUS.

JumpCloudNetskope CASBSSOMFA
SOC Operations

Detection & Response

SIEM & Threat Operations

Deploying and operating Wazuh for log analysis, utilizing Cowrie honeypots for decoy threat capture, and developing LLM-assisted threat detection and automated response.

WazuhCowrie honeypotLog AnalysisLLM-Assisted Threat Detection
Offensive Security

Offensive Security

Assessment & Penetration Testing

Penetration testing methodologies, vulnerability assessment, web & network security auditing, asset reconnaissance, and Active Directory attack path analysis.

Penetration TestingVulnerability AssessmentWeb & Network SecurityReconnaissance
Toolchain

Security Tools

Security Arsenal

Practical execution of industry-standard security toolsets for packet analysis, traffic inspection, proxy interception, and vulnerability verification.

NmapBurp SuiteMetasploitKali Linux
Scroll or Swipe Horizontally
// GitHub Projects

Featured Projects

Working security engineering projects from github.com/nithin-yadav-07

Vulnerability Assessment

Vulnerability Scanner

Service Discovery & CVE Correlation

Automated service discovery and CVE/NVD correlation to prioritize exploitable weaknesses, with structured remediation-oriented reports.

PythonNmap NSECVE/NVDVulnerability Assessment
GitHub
Reconnaissance

Automated Recon Framework

Modular Reconnaissance & Asset Discovery

Modular workflow: subdomain discovery, DNS enumeration, service/version fingerprinting; reusable modules.

PythonDNS EnumerationSubdomain DiscoveryFingerprinting
GitHub
Network Engineering

Multithreaded Port & Service Scanner

Scratch-Built Socket Scanner

Built from scratch; open-port detection and service/version fingerprinting.

PythonSocketsMultithreadingPort Scanning
GitHub
★ Featured SOC Platform

Zitan Security

AI-Driven SOC Monitoring Platform

Collects system and web-server logs through Wazuh and passes them to a local LLM (Qwen2.5) to detect attack patterns. Automated response blocks unauthorized deletion and copying of sensitive files. Cowrie honeypot, FastAPI dashboard with 2FA, JWT and RBAC, live log feed, AI-explained event details, Twilio SMS/call alerts. Fully working.

WazuhCowrieFastAPIQwen2.5
GitHub
★ Anti-Phishing Suite

CyberShield

Phishing & Spam Detection

Chrome Extension (Manifest V3) plus web app. Scans domains and emails and blocks suspicious, phishing and spam domains and emails. Scoring uses Levenshtein distance (typosquatting), brand-impersonation allowlists, blocklists, suspicious-TLD checks and urgency-keyword analysis. Passed 43/43 test cases.

Chrome ExtensionManifest V3Web AppHeuristics
GitHub
Vulnerability Assessment

Vulnerability Scanner

Service Discovery & CVE Correlation

Automated service discovery and CVE/NVD correlation to prioritize exploitable weaknesses, with structured remediation-oriented reports.

PythonNmap NSECVE/NVDVulnerability Assessment
GitHub
Reconnaissance

Automated Recon Framework

Modular Reconnaissance & Asset Discovery

Modular workflow: subdomain discovery, DNS enumeration, service/version fingerprinting; reusable modules.

PythonDNS EnumerationSubdomain DiscoveryFingerprinting
GitHub
Scroll or Swipe Horizontally
// Certifications

Certifications & Achievements

Professional ethical hacking qualifications and national hackathon achievements.

Finalist · Top 5 of 650+

Jain National Hackathon, Tech for Agriculture

Organized with IBM

Selected as national finalist (Top 5 of 650+ participants nationwide) in the prestigious hackathon organized in partnership with IBM.

National FinalistTop 5 of 650+IBMHackathon
In Progress

CEH v13 (Certified Ethical Hacker)

Targeting December 2026

Comprehensive ethical hacking curriculum covering advanced attack vectors, reconnaissance, system hacking, and penetration testing methodologies.

Ethical HackingCEH v13Target: Dec 2026Offensive Security
Finalist · Top 5 of 650+

Jain National Hackathon, Tech for Agriculture

Organized with IBM

Selected as national finalist (Top 5 of 650+ participants nationwide) in the prestigious hackathon organized in partnership with IBM.

National FinalistTop 5 of 650+IBMHackathon
In Progress

CEH v13 (Certified Ethical Hacker)

Targeting December 2026

Comprehensive ethical hacking curriculum covering advanced attack vectors, reconnaissance, system hacking, and penetration testing methodologies.

Ethical HackingCEH v13Target: Dec 2026Offensive Security
Finalist · Top 5 of 650+

Jain National Hackathon, Tech for Agriculture

Organized with IBM

Selected as national finalist (Top 5 of 650+ participants nationwide) in the prestigious hackathon organized in partnership with IBM.

National FinalistTop 5 of 650+IBMHackathon
In Progress

CEH v13 (Certified Ethical Hacker)

Targeting December 2026

Comprehensive ethical hacking curriculum covering advanced attack vectors, reconnaissance, system hacking, and penetration testing methodologies.

Ethical HackingCEH v13Target: Dec 2026Offensive Security
Finalist · Top 5 of 650+

Jain National Hackathon, Tech for Agriculture

Organized with IBM

Selected as national finalist (Top 5 of 650+ participants nationwide) in the prestigious hackathon organized in partnership with IBM.

National FinalistTop 5 of 650+IBMHackathon
Scroll or Swipe Horizontally
// Education

Academic Background

Formal education spanning secondary school through a cybersecurity-focused degree.

Bachelor of Computer Applications (BCA)

Cybersecurity

SSMRV College, Bengaluru

Expected 2027

Pre-University (PUC)

PCMC — Physics, Chemistry, Mathematics, Computer Science

Krupanidhi Pre-University College

2022 – 2024

Secondary School

Rockwood Green Public School (RGPS)

2022