Paras Dua

I’m a cyber security analyst focused on practical risk reduction through Vulnerability Assessments and Penetration Testing (VAPT). In my current role, I test web applications and network infrastructure, then turn findings into remediation reports for development teams.

I gained hands-on penetration testing experience through my apprenticeship at Craw Security, where I executed end-to-end security assessments aligned with PTES and OWASP Top 10. I also wrote Python and Bash scripts to automate reconnaissance and produced detailed vulnerability reports with actionable fixes.

My work blends security operations and offensive validation: I support SOC activities by monitoring real-time network traffic and analyzing logs for suspicious behavior. I also conduct security audits against industry-standard security frameworks, and I harden systems by analyzing protocols and configurations.

I’m energized by continuous learning and collaboration—whether that’s building tools (e.g., a Web pentesting and brute force detector) or contributing as a Core Member in the GESS Tech Team. I’ve also participated in and won university-organized hackathons, which reinforced my drive to deliver results under real constraints.