Deepesh Kumar Mahawar deepmaha2006

🛡️ `$ whoami`

analyst:
  name        : Deepesh Kumar Mahawar
  role        : SOC Analyst (Tier 1 / L1) · Cybersecurity Analyst
  location    : Jaipur, Rajasthan, India  (IST, UTC+05:30)
  education   : B.Tech CSE (Cyber Security) — Poornima College of Engineering, Jaipur (NAAC A+, RTU Kota)
  grades      : CGPA 7.59/10 · rising trend → Sem III SGPA 8.44 → Sem IV SGPA 9.21
  graduating  : Apr 2028 (expected)
  focus       : [ Alert Triage, Log Analysis, Threat Detection, Incident Response, Web App Pentesting ]
  frameworks  : [ MITRE ATT&CK, OWASP Top 10, CVSS, NIST IR Lifecycle ]
  looking_for : SOC Analyst / Security Analyst roles — in-house SOC, MSSP or MDR

I'm a cybersecurity undergraduate who works on the blue team with a red-team background. I monitor, triage and escalate: confirming or adjusting alert criticality, enriching events with context, filtering out false positives and handing real incidents to Tier 2 with clear, evidence-backed write-ups. My web-app pentesting background (OWASP Top 10, Burp Suite, Metasploit) means I know what an attack looks like before it shows up in the logs.

🎯 40%	🎣 94.7%	🧪 430+	🏁 Top 1%	💻 804
less manual alert triage _FraudShield	phishing detection accuracy _PhishGuard	automated tests _HydraX	TryHackMe globally _{278 rooms · 27 badges}	LeetCode problems _solved

🔁 `$ cat soc_playbook.md` — how I handle an alert

flowchart LR
    A[🚨 SIEM / XDR Alert<br/>Wazuh · Splunk] --> B{Triage<br/>confirm / adjust<br/>criticality}
    B -->|Benign| C[✅ False Positive<br/>document + tune rule]
    B -->|Suspicious| D[🔎 Investigate<br/>logs · user activity<br/>traffic patterns]
    D --> E[🧭 Enrich & Map<br/>IOCs · MITRE ATT&CK]
    E --> F{High risk?}
    F -->|No| G[📝 Close with notes]
    F -->|Yes| H[⬆️ Escalate to Tier 2<br/>evidence-backed report]
    H --> I[🛠️ Contain → Eradicate → Recover]
    C -.feedback.-> A

💼 `$ cat experience.log`

+ [JUN 2026 – JUL 2026]  Cyber Security Intern — Bright Hub Pvt Ltd, Jaipur
  › Identified SQLi & XSS attack vectors in lab web apps through VAPT (OWASP Top 10, Burp Suite)
  › Analysed intercepted HTTP/HTTPS traffic to isolate malicious payloads — the activity a SOC flags in WAF logs
  › Documented findings with CVSS severity, evidence & remediation → escalation-ready incident reports

+ [JUN 2025 – JUL 2025]  Web Development Intern (Secure Coding) — Renao Robotics Pvt Ltd, Jaipur
  › Security-audited a production web app and closed 5+ gaps (exposed API keys, missing input validation), zero regressions
  › Enforced Content Security Policy, sanitized input, XSS-safe DOM handling, parameterized Node.js/MySQL queries
  › Shipped 3+ React interfaces in Git-based Agile sprints with OWASP Top 10 controls in place

🧰 `$ ls ./projects/ --sort=impact`

🐍 HydraX — Bug Bounty Automation Platform · Python · FastAPI · PostgreSQL · Celery · Docker

25 scanner modules (XSS, SQLi, SSRF, IDOR, XXE, API security) mapped to OWASP Top 10, on a threaded scan engine with circuit breaker, adaptive rate limiting and Nmap / Nuclei / Nikto integration
Alert-fatigue control: findings tiered into confirmed / possible / info using baseline-controlled evidence, prioritised with a 0–100 risk score from 5 weighted factors, plus SOAR-style webhook escalation
Multi-tenant backend correlates telemetry from signed connector agents → CWE-mapped reports (HTML · JSON · SARIF), backed by 430+ tests and a CI pipeline with Bandit, Gitleaks, Trivy

🛡️ FraudShield — Real-Time Anomaly Detection & Alert Escalation Engine · Python · Node.js · SQLite · OCR

SIEM-style correlation and detection rules flagged high-risk KYC cases across 500+ records at ~91% accuracy
SOC-style alert dashboard fed by 3 classifiers → 40% less manual triage, alert response under 60 seconds
🏆 Smart India Hackathon 2025 national nominee (Team Drishti), presented to a 5-member evaluation panel

🎣 PhishGuard — Phishing URL Detection Tool · Python

94.7% accuracy · 93.2% precision · 96.1% recall · F1 94.6% against PhishTank and DMOZ samples
20+ heuristic indicators: domain entropy, brand spoofing, URL shorteners, IP-based hosts, risky TLDs
0–100 risk score with per-indicator breakdown and bulk JSON export; runs fully offline with no third-party APIs

📡 Wazuh SIEM Home Lab · Wazuh · Linux

Deployed a Wazuh manager and agents for centralised visibility into endpoint and authentication logs
Practised Tier 1 triage, false-positive review and escalation notes mapped to MITRE ATT&CK

💉 SQLShield — SQL Injection Scanner · Python

85+ payloads across 5 techniques (error, boolean, time, UNION, comment-based) with MySQL, PostgreSQL, MSSQL and Oracle variants
Findings rated High / Medium / Low in JSON reports

🌐 NetSentinel — Asynchronous Port Scanner · C++20 · Boost.Asio · CMake

Non-blocking TCP scanner: open / closed / filtered classification, banner grabbing, 40+ well-known service mappings for attack-surface discovery

🔐 SecureVault — Local Password Manager · Python · Flask · JavaScript

Fernet (AES-128-CBC + HMAC-SHA256) encryption with PBKDF2-HMAC-SHA256 key derivation at 480,000 iterations
Secure password generation and live strength analysis; all data stays on-device

_{▸ click any project to expand / collapse}

⚔️ `$ cat ./arsenal.conf`

🔵 Blue Team — Detect & Respond

_{Alert triage & prioritisation · event correlation · detection rules · log & traffic analysis · phishing analysis · incident documentation · escalation}

🔴 Red Team — Assess & Exploit

_{OWASP Top 10 · CVSS scoring · privilege escalation · Active Directory (labs) · OSINT · attack-surface mapping}

☁️ Cloud & DevSecOps

💻 Code & Data

📜 `$ cat ./certifications.log`

🔐 Cybersecurity

Certification	Issuer	Date
Ethical Hacker	Cisco Networking Academy	Apr 2026
Introduction to Cybersecurity	Cisco Networking Academy	Apr 2026
Cyber Job Simulation	Deloitte (Forage)	May 2026
Cybersecurity Analyst Job Simulation — Identity & Access Management	Tata Group (Forage)	May 2026
Introduction to Python for Defensive Security	Red Team Leaders	Jun 2026
Introduction to Penetration Testing	Centri	Jun 2026
Introduction to Critical Infrastructure Protection	OPSWAT Academy	Jul 2026

☁️ Cloud & DevOps

Certification	Issuer	Date
AWS Cloud Practitioner Essentials	Amazon Web Services	Apr 2026
Introduction to Cloud Infrastructure: Describe Cloud Concepts	Microsoft Learn	Apr 2026
Modern DevOps Practices	8Bit System / Poornima College of Engineering	Feb 2026

📊 Risk, Data & AI

Certification	Issuer	Date
Internal Audit Job Simulation — Risk Assessment	Goldman Sachs (Forage)	May 2026
Data Analyst — Big 4 Ready	OneRoadmap	May 2026
Career Essentials in Generative AI	Microsoft & LinkedIn	Apr 2026
AI Fluency: Framework & Foundations	Anthropic	Apr 2026
Introduction to Model Context Protocol	Anthropic	Apr 2026
Design Thinking — A Primer	NPTEL, IIT Madras	Aug 2025

🏆 `$ cat ./achievements.log`

+ [SEP 2025] 🏅 Smart India Hackathon 2025 — National Nominee (Team Drishti, Poornima College IIC)
             → FraudShield: anomaly detection & alert escalation engine
+ [ONGOING ] 🚩 TryHackMe — [0xE][GUARDIAN] · Top 1% globally · Rank #7,969 · 278 rooms · 27 badges
+ [JAN 2026] 🧑‍💻 LNMHACKS 8.0 @ LNMIIT — Team Leader
             → stock prediction platform with blockchain-backed immutable audit trail
+ [FEB 2025] 🥉 AADHAR'13 Tech-Fest — 3rd Place, Micro Mouse (autonomous maze-solving robot)
+ [ONGOING ] 🧠 LeetCode — 804 problems solved

🚩 TryHackMe — `[0xE][GUARDIAN]`

🏆 Global Rank	📊 Percentile	🚪 Rooms Completed	🎖️ Badges	🔥 Streak
#7,969	Top 1%	278	27	26 days

_{SOC · Blue Team · Offensive Security content}

📈 `$ git log --stats`

📡 `$ ./connect.sh`

[ STATUS  ] ● online  — open to SOC Analyst / Security Analyst roles & internships
[ MISSION ] detect early · triage fast · escalate with evidence
[ MOTTO   ] think like an attacker, defend like an analyst

Navigation Menu

Deepesh Kumar Mahawar deepmaha2006

Achievements

Achievements

Block or report deepmaha2006

🛡️ `$ whoami`

🔁 `$ cat soc_playbook.md` — how I handle an alert

💼 `$ cat experience.log`

🧰 `$ ls ./projects/ --sort=impact`

⚔️ `$ cat ./arsenal.conf`

📜 `$ cat ./certifications.log`

🏆 `$ cat ./achievements.log`

🚩 TryHackMe — `[0xE][GUARDIAN]`

📈 `$ git log --stats`

📡 `$ ./connect.sh`

Pinned Loading

Uh oh!

Deepesh Kumar Mahawar deepmaha2006

Achievements

Achievements

🛡️ $ whoami

🔁 $ cat soc_playbook.md — how I handle an alert

💼 $ cat experience.log

🧰 $ ls ./projects/ --sort=impact

⚔️ $ cat ./arsenal.conf

📜 $ cat ./certifications.log

🏆 $ cat ./achievements.log

🚩 TryHackMe — [0xE][GUARDIAN]

📈 $ git log --stats

📡 $ ./connect.sh

Pinned Loading

Uh oh!

🛡️ `$ whoami`

🔁 `$ cat soc_playbook.md` — how I handle an alert

💼 `$ cat experience.log`

🧰 `$ ls ./projects/ --sort=impact`

⚔️ `$ cat ./arsenal.conf`

📜 `$ cat ./certifications.log`

🏆 `$ cat ./achievements.log`

🚩 TryHackMe — `[0xE][GUARDIAN]`

📈 `$ git log --stats`

📡 `$ ./connect.sh`