Open to opportunities

Sohom Chandra

@sohomchandra

Message

Cybersecurity analyst focused on malware analysis, threat detection, and practical defensive/offensive security.

India

Message

What I'm looking for

I am seeking hands-on security roles focused on malware analysis, threat detection, or pentesting within collaborative teams that value learning, impact, and regulatory/compliance alignment.

I am a cybersecurity analyst and GRC enthusiast with hands-on experience in malware analysis, pentesting, and incident response gained through internships, open-source projects, and competitive CTF participation.

At Cyberstanc I analyzed 10+ malware samples weekly, identified IOCs, unpacked obfuscated binaries, and supported regulatory mapping to ISO 27001 and SEBI requirements.

I contribute to community security efforts and have built tools such as a Malware Analysis Toolkit, an automated reconnaissance pipeline (Reaver), and app reverse-engineering documentation (Kraken), reducing recon time and improving investigative outcomes.

I hold strong programming and tooling skills (Python, C, Rust, Ghidra, Burp Suite, Wireshark, Nmap), relevant certifications in progress, and a consistent record in CTFs and hackathons that demonstrates applied problem-solving under pressure.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Intern

Current

Cyberstanc

May 2025 - Present (8 months)

Conducted malware analysis on 10+ weekly samples, identifying IOCs and unpacking obfuscated binaries, and mapped findings to ISO 27001 and SEBI cybersecurity requirements to support regulatory design.

Malware Analysis Incident Response ISO 27001 SEBI Compliance Ghidra Python

Current

Pentesting & Network Security

Current

Hackers10

Jan 2025 - Present (1 year)

Performed real-world pentesting and network security tasks and participated in CTFs to validate exploit development and defensive techniques.

Penetration Testing Network Security Nmap Metasploit Nessus Reverse Engineering Wireshark

Current

Community Security Contributor

Current

Nas.io

Jan 2025 - Present (1 year)

Reported vulnerabilities in APIs and web applications to improve security of online learning community platforms and coordinated remediation with maintainers.

API Security Application Security Burp suite Responsible Disclosure Nmap