bash — gaurav@blackhat — 120×32
gaurav@blackhat:~/portfolio$ ./init.sh
Session established · Available for engagements

Gaurav_

Penetration Tester // Cybersecurity Analyst

I break systems so attackers can't. 4+ years hunting vulnerabilities across web apps, cloud, and financial infrastructure — blending offensive security, threat modeling, and financial-crime investigation. Based in Indore, IN — operating globally.

Years Ops
0
CVE / Bug Bounties
0
Assets Monitored
0
Certs Active
0
whoami

Analyst. Attacker.
Defender.

I'm a penetration tester and cybersecurity analyst with 4+ years across offensive security, incident response, and financial-crime investigation. I think like an adversary — mapping attack surface, chaining primitives, and turning weak assumptions into demonstrable impact.

In 2025 I closed four independent investigations — document forgery, healthcare claims fraud, a responsibly-disclosed vulnerability (bounty awarded), and a systemic control failure. Each engagement sharpened both the offensive intuition and the audit-grade documentation.

I hold the Regulatory Compliance Specialization (Univ. of Pennsylvania) and am closing out IBM Cybersecurity Analyst and Google Data Analytics. Actively targeting red team, pentest, and fincrime engineering roles.

RCE
Bug Bounty · Responsible Disclosure

Discovered a critical system vulnerability, disclosed via coordinated channel. Monetary recognition awarded.

CRIT
Document Forgery Investigation

Verified fabricated medical records via cross-reference audit. Evidence chain led to employee termination.

HIGH
Healthcare Claims Fraud

Identified fabricated medi-claim through reimbursement pattern analysis and anomaly detection.

INFO
Systemic Non-Compliance Audit

Process audit led to formal warnings, root-cause remediation, and new corrective protocols.

system stats
0
Years in the field
0
Investigations (2025)
0
Assets Monitored
0
Active Certifications
active_toolkit.log
▸ nmap · burp suite
▸ metasploit · wireshark
▸ sqlmap · ffuf
▸ python · bash · sql
Penetration TestingOWASP Top 10Vulnerability ResearchRed Team Ops Threat ModelingIncident ResponseDigital ForensicsOSINT AML / FinCrimeBug BountyNetwork SecurityCloud Security Penetration TestingOWASP Top 10Vulnerability ResearchRed Team Ops Threat ModelingIncident ResponseDigital ForensicsOSINT AML / FinCrimeBug BountyNetwork SecurityCloud Security
history

Engagements &
Kill Chains

2025 → present
Security & Incident Analyst
TaskUs India — Starship Technologies
  • Monitor real-time telemetry across 270+ globally distributed assets; hunt anomalies, insider threat signals, and fraud indicators in analytical dashboards
  • Lead incident investigations end-to-end — evidence acquisition, timeline reconstruction, chain-of-custody packaging, and escalation per IR playbook
  • Execute the escalation matrix for theft, physical intrusion, and high-severity events; maintain audit-grade case documentation
  • Identify control gaps and collaborate with global risk teams to harden detection logic and preventative countermeasures
Key Finding: Document Forgery → Employee Termination
2024
Compliance & Risk Associate
Lagaleg Solutions LLP — Law Firm
  • Ran KYC / due-diligence reviews for client onboarding using a risk-based approach to surface compliance gaps and identity red flags
  • Detected fake accounts and impersonation attempts; built analytics dashboards tracking suspicious activity patterns
  • Implemented fraud-prevention controls — payment verification, SSL / TLS audits, and access-control reviews across 10+ client platforms
2022 → 2023
Web Security & Automation Specialist
Freelance — Remote
  • Delivered security assessments on 15+ client sites — surfacing bot traffic, credential-stuffing, fake registrations, and payment fraud indicators
  • Built automated defensive workflows (Zapier / Make.com) to enforce data integrity and reduce human-error attack surface
exploits

Built to
./own_it

01_txn_monitor LIVE
AML Transaction Monitoring System

Live interactive dashboard simulating real-time transaction ingestion with automated risk scoring, AML typology detection, and a full analyst workflow — SAR filing, case escalation, evidence packaging.

AMLTransaction Monitoring SARRisk ScoringJavaScript
launch
02_kyc_tracker LIVE
KYC Due Diligence & Risk Scoring Tracker

Excel-driven KYC onboarding tracker for 50+ profiles — CDD/EDD classification, PEP & sanctions flags, automated tiered risk scoring, and audit-ready pivot reporting.

KYCCDD / EDD PEP ScreeningExcelVLOOKUP
launch
arsenal

The Toolkit

offensive_security
Web App Pentesting90%
OWASP Top 10 Exploitation85%
Vulnerability Research82%
Recon & OSINT80%
Network Pentesting75%
defense_&_forensics
Incident Investigation92%
Evidence & Chain of Custody88%
Threat Modeling85%
AML / Fraud Analytics83%
Log & SIEM Analysis78%
tooling_&_scripting
Burp Suite / ZAP88%
Nmap / Wireshark85%
Python (scripting)75%
Bash / Linux CLI70%
SQL (Injection & Analysis)68%
certs

Credentials

✓ verified
Regulatory Compliance Specialization
University of Pennsylvania · Coursera
◐ in_progress
IBM Cybersecurity Analyst Professional Certificate
IBM · Coursera · ETA Apr 2026
◐ in_progress
Google Data Analytics Professional Certificate
Google · Coursera · ETA Apr 2026
connect
Open a socket

Available for pentest engagements · red team ops · AML & fincrime investigations

./compose_message --to gaurav@blackhat

Response within 24h · devp.gaurav@gmail.com · PGP available on request