Open to opportunities

Shubham User

@shubhamuser14

Message

Early-career offensive security engineer delivering PoC-backed findings and validations.

India

Message

What I'm looking for

I seek hands-on offensive security roles focused on red teaming, fuzzing, and vulnerability research with collaborative teams, clear remediation cycles, and opportunities to automate testing and grow technical leadership.

I am an early-career offensive security engineer focused on red team and penetration testing, delivering proof-of-concept backed findings and executive-ready reporting across web, mobile, and product environments.

I have authored 21 fuzzing reports with PoCs, tested 8+ web and mobile apps with actionable reports and retest confirmation, and created a 92-test Cisco router suite that enabled repeatable security validation.

I consolidate end-to-end testing workflows, validate management-plane security (TLS/mTLS, SSH, AAA), and automate assessments using Python, Docker and common security frameworks to drive measurable improvements in operational efficiency and remediation outcomes.

Experience

Work history, roles, and key accomplishments

Current

Offensive Security Engineer

Current

Deltaphi Pvt. Ltd.

May 2025 - Present (9 months)

Perform security validation and vulnerability discovery for Jio Wi‑Fi CPE and enterprise/OT stacks, producing PoC-backed findings and retesting fixes; validated management-plane security (TLS/mTLS, SSH) with packet-level evidence.

Penetration Testing TLS Wireshark POC Python

Cybersecurity Consultant

PropFaith Pvt. Ltd.

Feb 2025 - May 2025 (3 months)

Supported OT assessments aligned to ISO 27001 and IEC 62443, identified Internet-facing risks and prioritized remediation recommendations for operational environments.

ISO 27001 Risk Assessment Reporting Network Protocols Wireshark

Software QA Engineer

Forcepoint

Jul 2024 - Jan 2025 (6 months)

Performed regression testing and policy configuration for DLP endpoints across Windows and macOS, validating cross-browser and application behavior to maintain data protection policies.

Regression Testing Windows MacOS QA Automation Test Reporting

VAPT Intern

Hinduja Global Solutions

Dec 2023 - Jun 2024 (6 months)

Conducted black and grey-box testing across 8+ web and mobile applications, delivered developer-friendly findings with steps, evidence, impact, and retest criteria.

Mobile Testing Burp suite OWASP Top 10 Report Writing Retesting JWT IDOR

Education

Degrees, certifications, and relevant coursework

RAIT, D Y Patil University

Bachelor of Technology (Honors), Computer Engineering (Information Security & Blockchain)

Activities and societies: Silver Medalist — Dr. Homi Bhabha Balvaidnyanik Competition; RMO Qualified; MTSE AIR-98; Editor-in-Chief — IEEE RAIT; Event Co-Head — ISTE RAIT Techfest; Publicity Head — ACM Techfest.

B.Tech (Honors) in Computer Engineering with focus on Information Security and Blockchain, completed in 2024.