Open to opportunities

Daram Saipavan

@daramsaipavan

Message

Results-driven cybersecurity professional specializing in penetration testing, CTI, and vulnerability management.

India

Message

What I'm looking for

I seek roles where I can perform hands-on pentesting/CTI, influence remediation prioritization, work with red teams, and grow in cloud and application security.

I am a cybersecurity professional with 3+ years of hands-on experience in penetration testing, vulnerability assessment, and cyber threat intelligence. I deliver end-to-end security testing across web applications, APIs, mobile platforms, and network infrastructure, mapping findings to MITRE ATT&CK and providing actionable remediation for technical and executive stakeholders.

I proactively monitor CTI feeds, prioritize remediation using CVSS-informed risk assessments, and simulate real-world adversaries through red team exercises. I continuously sharpen skills via CTF platforms and certifications (CEH, EJPT, AZ-900, SC-900), and I automate testing workflows to improve efficiency and detection capabilities.

Experience

Work history, roles, and key accomplishments

Current

Software Engineer

Current

Sopra Steria

Aug 2022 - Present (3 years 10 months)

Performed end-to-end penetration testing across web, API, mobile, and network assets, identifying critical vulnerabilities and improving security posture; produced executive and technical VAPT reports and prioritized remediations to reduce exploitable risk.

Penetration Testing OSINT CTI Burp suite Nmap Metasploit Nessus

Penetration Testing Intern

Virtually Testing Foundation

Oct 2021 - Dec 2021 (2 months)

Completed hands-on web application pentesting labs, exploited vulnerabilities, and produced professional penetration test reports aligned with OWASP Top 10 standards.

Web Testing OWASP Top 10 Report Writing Burp suite Sqlmap

Cloud Security Associate Intern

Virtually Testing Foundation

Jul 2021 - Sep 2021 (2 months)

Worked on AWS cloud security tasks including IAM, S3, Lambda, EC2 hardening, log monitoring with CloudTrail/CloudWatch, and WAF/CloudFront protections against common attacks and DDoS.