Anugrah Kizhakke Veedu

Web Application Developer (Intern) - Security & Infrastructure Focus

• Supervised day-to-day operations, log consistency, and system patch levels across internal evaluation servers and 3 isolated client-facing production hosting nodes.
• Proactively identified and mitigated OWASP Top 10 vulnerabilities prior to production release cycles, contributing to measurable reductions in attack surface exposure.
• Collaborated with engineering teams to securely deploy patches across staging and production environments, maintaining critical web components using Python and the Django framework.
• Implemented secure cryptographic authentication protocols and database integrations to safeguard sensitive user data integrity for 1,000+ relational records.

Intrusion Detection & Threat Monitoring System (IDS)

• Designed and deployed a production-simulating multi-layered IDS environment from scratch, integrating an open-source firewall, intrusion detection system, and real-time monitoring tools.
• Built a centralized SIEM pipeline using Elasticsearch, Logstash, and Kibana to aggregate multi-source security logs, reducing manual log review time by 30%.
• Engineered 15+ custom detection rules using Suricata, reducing false-positive alerts by 20% while expanding defensive visibility against critical CVEs mapped to MITRE ATT&CK vectors.

Active SOC Home Lab & Threat Hunting Environment

• Architected a multi-subnet virtualized SOC environment utilizing VirtualBox, establishing isolated NAT and Host-Only networks to safely execute and monitor attack simulations.
• Deployed a centralized defense infrastructure featuring a Wazuh SIEM, integrating a Snort NIDS engine to ingest, parse, and analyze internal lab traffic.
• Engineered an attack-and-defend pipeline by configuring a Kali Linux adversary node to launch targeted activity against a Linux victim machine, validating SIEM detection and alert logic.

Advanced Malware Detonation & C2 Extraction

• Executed and analyzed weaponized malware payloads (Macro-enabled documents) within an isolated Any.Run cloud sandbox to map runtime execution graphs and process injection sequences.
• Extracted actionable Indicators of Compromise (IoCs), identifying external Command & Control (C2) IP infrastructure and spoofed user-agent beaconing behavior over HTTPS.
• Correlated network telemetry with Suricata IDS signatures and mapped adversary Tactics, Techniques, and Procedures (TTPs) directly to the MITRE ATT&CK framework.

SOC Automation & Enrichment Dashboard

• Engineered a custom Tier 1 SOC triage dashboard to automate the enrichment of Indicators of Compromise (IOCs) and reduce manual alert fatigue.
• Developed intelligent backend auto-routing logic and integrated RESTful APIs to extract and parse complex JSON threat intelligence for network reputation and multi-engine malware telemetry.
• Conducted rigorous True Positive and True Negative validation simulations against live malware hashes (e.g., WannaCry) and active scanner IPs to verify engine accuracy.

TrippyGo - Secure Full-Stack Web Application

• Engineered a full-stack application with a security-first approach, implementing robust cryptographic session management and strict input validation to systematically eliminate SQL injection and XSS vulnerabilities.
• Applied MVC architecture principles and developed automated maintenance scripts to ensure secure database handling with zero deployment downtime.

Fortinet Certified Associate (FCA) in Cybersecurity

Fortinet Certified Fundamentals (FCF) in Cybersecurity

Mastercard Cybersecurity Job Simulation

Elastic Ecosystem & Technical Essentials

Linux Fundamentals

Currently Enrolled Professional Development

• Certified Ethical Hacker (CEH) — Expected: October 2026
• Certified IT Infrastructure & Cyber SOC Analyst (CICSA) — Expected: October 2026

Master of Science in Cyber Security

Bachelor's Degree in Computer Application