Open to opportunities

Maharshi Shukla

@maharshishukla

Message

I’m a Cloud Security Engineer focused on VAPT and cloud misconfigurations.

India

Message

What I'm looking for

I’m looking for remote or on-site opportunities where I can apply offensive VAPT skills to cloud security—spot misconfigurations early, validate findings with PoCs, and partner with development teams to remediate quickly.

I’m a cybersecurity professional specializing in Vulnerability Assessment and Penetration Testing (VAPT) across web, API, and network environments, with a focused transition into Cloud Security. I bring an offensive security mindset to identify misconfigurations, insecure architectures, and cloud-native attack vectors.

Hands-on AWS security experience includes IAM, VPC, S3, CloudTrail, and GuardDuty, along with AWS Config, KMS, and Security Hub for strengthened security posture. I deliver structured security reports aligned with OWASP Top 10, CVSS, and compliance standards to drive clear remediation outcomes.

In my recent role as a Junior Analyst – VAPT at Anzen Technologies Pvt. Ltd., I conducted end-to-end web and API testing using Burp Suite Pro, OWASP ZAP, and Postman, validated high-severity issues (e.g., SQL Injection, XSS, IDOR, Broken Authentication), and authored PoC-based reports with prioritized fixes. I also supported network assessments with Nmap/Nessus and packet analysis with Wireshark, and identified insecure AWS S3 configurations and authorization flaws in cloud-hosted applications.

Experience

Work history, roles, and key accomplishments

Junior Analyst – VAPT

Anzen Technologies Pvt. Ltd.

Mar 2025 - Oct 2025 (7 months)

Conducted end-to-end web and API VAPT engagements, identifying and validating high-severity OWASP Top 10 issues such as SQL injection, XSS, IDOR, broken authentication, and sensitive data exposure. Performed network vulnerability assessments and reported findings with CVSS-based severity and remediation recommendations, including AWS S3 and authorization issues.

Web Application VAPT SQL Injection XSS IDOR Data Exposure BOLA OWASP Top 10 CVSS OWASP ZAP Postman Nmap Nessus Wireshark S3 Vulnerability Reports

Cybersecurity Intern

Cryptus Cyber Security Pvt. Ltd.

May 2023 - Jul 2023 (2 months)

Supported penetration testing activities including reconnaissance, enumeration, and vulnerability analysis in simulated environments. Assisted with vulnerability scanning and documentation using Nmap, Nessus, and Burp Suite, including remediation validation under senior analyst supervision.