Surendra User

I’m a Security Analyst who finds and documents real vulnerabilities, investigates alerts, and builds security tooling from scratch. I’ve executed VAPT engagements across 7 web applications, identifying 15 vulnerabilities (CVSS 6.0–7.8) such as SQLi, Stored XSS, and CSRF with full PoC documentation.

I also complete hands-on SOC work, delivering 30+ TryHackMe SOC Level 1 investigations covering alert triage, phishing analysis, C2 traffic detection, and Splunk log analysis. I bring a disciplined workflow—IOC identification, log correlation, escalation, and remediation validation—so findings don’t just get reported, they get verified.

To keep improving, I develop independent security tools in Python and C++, including a C++ SSH brute-force detection tool designed for SIEM ingestion and a Python phishing detection system that integrates VirusTotal and Bitdefender APIs. I’m actively pursuing CompTIA Security+ while continuously strengthening my cloud security foundation through Google Cybersecurity and Google Cloud Platform skill badges.