Open to Opportunities

Hi, I'm
Anugrah Kizhakke Veedu

Cybersecurity professional with an MSc in Cyber Security and hands-on experience at the intersection of Threat Intelligence, Vulnerability Assessment (VAPT), and Security Operations. Experienced in mapping C2 infrastructure, conducting OSINT research, and triaging security alerts. Proficient in building Python/Django automation to streamline IOC enrichment, discover exposed secrets, and map external attack surfaces (EASM).

View Projects Download CV
Languages: English Hindi Malayalam Tamil
Anugrah Kizhakke Veedu

Technical Skills

Vulnerability Assessment & AppSec

Burp Suite Nuclei Nessus MobSF (Mobile VAPT) OWASP Top 10 Web/API Security Testing Secure Coding Vulnerability Triage

Malware Analysis & Threat Intel

Any.Run VirusTotal AbuseIPDB IOC Extraction C2 Infrastructure Mapping Sandbox Analysis OSINT HUMINT concepts

SOC & Security Operations

Security Monitoring Alert Triage Threat Hunting Attack Surface Management (ASM) Digital Risk Protection (DRP) Log Analysis MITRE ATT&CK

SIEM, IDS/IPS & Network Security

Wazuh ELK Stack Splunk Suricata Snort pfSense FortiGate Network Traffic Analysis

Systems & Automation

Python Django REST APIs JSON Parsing Security Automation Triage Scripting Linux/Ubuntu Server Kali Linux Git

Professional Experience

Web Application Developer Intern - Security & Infrastructure Focus

Btrac Solutions • Kerala, India

July 2022 - Mar 2023
  • Supported application and infrastructure operations across internal evaluation systems and 3 client-facing hosting nodes, including monitoring, maintenance, security updates, and troubleshooting.
  • Performed VAPT across web applications using OWASP Top 10 principles and Burp Suite to identify, triage, and prioritize common application vulnerabilities before deployment.
  • Collaborated with development and infrastructure teams to deploy application updates and security patches across staging and production environments.
  • Developed and maintained Python/Django components with emphasis on secure authentication, input validation, database security, and protection of sensitive data.

Cybersecurity Projects

Digital Risk Protection (DRP) Automation

Threat Intel Automation • Nov 2026
Python GitHub REST API JSON OSINT Threat Intelligence
  • Developed a Python-based GitHub secret scanner utilizing the GitHub REST API to proactively detect exposed AWS credentials (AKIA) and private RSA keys across public repositories.
  • Demonstrated automated threat intelligence gathering and OSINT capabilities, mimicking enterprise credential leak detection.

External Attack Surface Management (EASM)

Infrastructure Mapping • Nov 2026
Python HackerTarget API Concurrent Threads HTTP Probing
  • Engineered an automated Python reconnaissance tool integrating with OSINT APIs and concurrent HTTP probing to enumerate, map, and validate live subdomains and forgotten cloud assets.
  • Streamlined infrastructure hunting workflows to identify potential attack vectors, including dangling DNS records and exposed administrative portals.

Cloud & API Vulnerability Scanner

VAPT Automation • Nov 2026
Python API Security Cloud Misconfigurations Concurrent Fuzzing
  • Engineered a concurrent Python fuzzing tool to rapidly identify OWASP API vulnerabilities and cloud misconfigurations, including exposed environment variables, Git repositories, and AWS credentials.
  • Simulated VAPT reconnaissance workflows to validate endpoint security, access controls, and WAF responses across external attack surfaces.

AI Attack Surface Monitor

AI Security Research • Nov 2026
Python AI Security Vector DBs LLM Credentials
  • Developed an automated Python scanner to detect shadow AI infrastructure, hunting for exposed Vector Databases (ChromaDB, Qdrant) and unsecured Agentic workflows (Flowise, Langflow).
  • Implemented custom regex pattern matching to proactively identify and triage leaked LLM API credentials (OpenAI, Anthropic, HuggingFace) across external attack surfaces.

Dark Web & Threat Actor Monitor

Threat Intel (HUMINT) • Nov 2026
Python Dark Web OSINT HUMINT JSON Parsing
  • Engineered a Python-based Threat Intelligence monitor that continuously parses aggregated OSINT feeds from Tor network ransomware leak sites (e.g., LockBit, Play, RagnarLocker).
  • Automated target-specific keyword hunting to provide early warning data breach alerts and tracked current Threat Actor activity (HUMINT) to map the evolving threat landscape.

Advanced Malware Detonation & C2 Analysis

Independent Project • June 2026
Any.Run Suricata MITRE ATT&CK OSINT
  • Analyzed malicious macro-enabled documents in an isolated Any.Run sandbox, examining process execution, network activity, and behavioral indicators.
  • Extracted Indicators of Compromise (IOCs), including suspicious IPs, domains, and leaked credentials, and successfully mapped Command-and-Control (C2) infrastructure using OSINT techniques.
  • Correlated malware network activity with Suricata alerts and mapped observed attacker behaviors to relevant MITRE ATT&CK tactics and techniques.

SOC Automation & IOC Enrichment Dashboard

Independent Project • June 2026
Python Django VirusTotal API AbuseIPDB API REST JSON
  • Developed a Python/Django-based security dashboard to automate IOC enrichment and significantly cut down redundant manual steps in research and reporting.
  • Integrated REST APIs to retrieve malware intelligence, IP reputation, and multi-source threat information, parsing JSON to automatically classify indicators for faster analyst triage.

Intrusion Detection & Threat Monitoring System

Master's Project - Teesside University • 2023 - 2024
Ubuntu Server pfSense Suricata ELK Stack
  • Designed and deployed a layered network security environment integrating pfSense firewall, Suricata IDS, and the ELK Stack for centralized security monitoring.
  • Developed and tested 15+ custom Suricata detection rules for network threats and security events, improving visibility into suspicious traffic.

Active SOC Home Lab & Threat Hunting Environment

Independent Lab • July 2026
VirtualBox Wazuh SIEM Snort IDS Kali Linux Linux
  • Built a segmented virtual SOC environment using VirtualBox with isolated NAT and Host-Only networks for controlled attack simulation and security monitoring.
  • Deployed Wazuh as the central SIEM and integrated Snort IDS to collect, correlate, and investigate security events.

TrippyGo – Secure Full-Stack Web Application

Bachelor's Project - Kannur University • 2023
Python Django HTML CSS SQLite
  • Developed a scalable travel management application from scratch, prioritizing modern data protection standards to safely process 500+ simulated user query interactions.
  • Implemented robust authentication workflows, cryptographic session management, and strict form validation to systematically eliminate 100% of SQL Injection (SQLi) and Cross-Site Scripting (XSS) vulnerabilities.

Certifications

Fortinet Certified Associate (FCA)

Fortinet • ID: 9668149803AK • June 2026

Fortinet Certified Fundamentals (FCF)

Fortinet • ID: 7103587775AK • June 2026

Elastic Ecosystem & Tech Essentials

Elastic • ID: LP1357 • June 2026

Linux Fundamentals

Hack The Box Academy • June 2026

Mastercard Cybersecurity Job Simulation

Forage • June 2026

Currently Enrolled Training

Red Team Hacker Academy, Calicut

  • • Certified Ethical Hacker (CEH) - Expected Nov 2026
  • • Certified IT Infrastructure & Cyber SOC Analyst (CICSA) - Expected Nov 2026

Education

Master of Science in Cyber Security

Teesside University • Middlesbrough, UK

2023 - 2024

Bachelor of Computer Applications (BCA)

Kannur University • Kerala, India

2020 - 2023

Let's build something secure together.

I'm always open to discussing SOC operations, threat intelligence, and defensive architecture. Feel free to reach out through any platform below.

WhatsApp / Phone +91 8547743622
Location Kannur, Kerala, India