Open to opportunities

BALASUBRAMANIYAN B

@balasubramaniyanb

Penetration tester and red team operator delivering CVSS-scored reports and offensive frameworks for real-world risk reduction.

India

Message

What I'm looking for

I’m looking for offensive security work in Red Team/VAPT, where I can run real engagements, deliver CVSS-scored findings, and build threat emulation and security awareness tooling—open to relocation to Germany and EU Blue Card roles.

I’m an offensive security professional with 2+ years of hands-on penetration testing, Red Team operations, and vulnerability research across web, network, and infrastructure environments. I’ve identified and exploited 40+ critical CVEs and specialize in privilege escalation, lateral movement, post-exploitation, and Active Directory attacks.

I build custom offensive frameworks (RREF, Sentinel-SDK) and deliver CVSS-scored pentest reports with remediation guidance aligned to OWASP Top 10 and MITRE ATT&CK. At Terra System Labs, I designed and built a phishing simulation ecosystem and ran 30+ penetration tests, while also holding ISO/IEC 27001:2022, 27701:2025 & 42001:2023 Lead Auditor credentials and actively pursuing OSCP.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester & Analyst

Current

Terra System Labs

Dec 2024 - Present (1 year 7 months)

Conducted 30+ web, network, and infrastructure penetration tests, identifying 40+ critical/high-severity CVEs across enterprise environments. Performed red team activities (privilege escalation, lateral movement, post-exploitation), delivered CVSS-scored reports aligned to OWASP Top 10, and presented findings to technical and C-level stakeholders.

Penetration Testing Lateral Movement Post Exploitation Burp suite Nmap Nessus Metasploit Wireshark CVE CVSS OWASP Top 10 SQLI SSRF IDOR XSS Attack Surface Management OSINT

Full-Stack Developer – Security Focus

SkillKaster

Dec 2024 - Jun 2025 (6 months)

Built React.js/Node.js applications to OWASP secure coding standards, implementing CSP, input validation, and authentication hardening across production platforms. Performed security code reviews and identified 12+ injection and authentication vulnerabilities prior to deployment.

React Secure Coding CSP Code Review Injection Vulnerabilities Authentication Vulnerability Analysis

Cyber Crime Investigator Intern

Tamil Nadu Cyber Crime Wing

Jun 2023 - Jul 2023 (1 month)

Investigated 20+ cybercrime incidents using digital forensics and Splunk log analysis, with findings used in law enforcement proceedings. Reduced mean time to evidence collection by ~20% through structured incident triage procedures.

Cybercrime Investigation Digital Forensics Splunk Triage

VAPT Intern

BM Infosec Limited

Jun 2022 - Jul 2022 (1 month)

Performed vulnerability assessments on 5+ platforms using Nessus and manual testing, reporting 8 critical findings with CVSS scores and remediation steps. Produced security assessment outputs for the identified vulnerabilities.

Vulnerability Assessment Nessus Manual Testing CVSS Security Assessments remediation