Open to opportunities

Pratik Bhalerao

@pratikbhalerao

Message

I secure endpoints and applications through SOC operations and penetration testing.

India

Message

What I'm looking for

I'm looking for an opportunity in SOC operations, vulnerability management, penetration testing, or application security where I can investigate real threats, automate security workflows, and grow through hands-on security engineering work.

I've operated Wazuh XDR/SIEM environments for continuous monitoring, triaged alerts across 40+ endpoints, and investigated 50+ security incidents at Technoriya eTechnologies.

I tune detection rules, correlate large-scale log data, and write incident reports with IoCs and remediation steps. My work reduced false positives by 30–40% and MTTR by 20%, while supporting vulnerability assessments with Nmap, Metasploit, Burp Suite, MITRE ATT&CK, and NIST/ISO 27001 guidance.

As an independent security researcher, I responsibly disclosed production vulnerabilities affecting Zomato's web and Android applications, including a hardcoded API key finding supported by a functional proof of concept.

Experience

Work history, roles, and key accomplishments

Cybersecurity Intern

Technoriya eTechnologies Pvt Ltd

Dec 2025 - Jun 2026 (6 months)

Monitored and triaged security alerts across 40+ endpoints using a self-deployed Wazuh XDR/SIEM environment, supporting continuous 24x7 detection and response operations. Investigated 50+ security incidents and performed vulnerability assessments and penetration testing using Nmap, Metasploit, and Burp Suite.

SIEM Alert Triage Log Analysis Incident Response Vulnerability Assessment Penetration Testing Nmap Metasploit Burp suite NIST ISO 27001 Python BASH Android Security Endpoint Security

Security Researcher

Independent Security Research

Jan 2025 - Jan 2025 (0 months)

Identified and responsibly disclosed an information disclosure vulnerability in Zomato's production web application, following responsible disclosure practices including proof-of-concept development and structured technical reporting.

Vulnerability Discovery Responsible Disclosure Proof of Concept Technical Reporting