SHUBHAM DADWAL

Security+ certified Cybersecurity Analyst with over 2 years of hands-on experience in security operations, vulnerability management, threat detection, and incident response. Currently pursuing MS in Cybersecurity & Privacy at the University of Central Florida (expected May 2025). Proficient in SIEM tools like Splunk, cloud security assessments (AWS), forensic methodologies, and scripting with Python/Bash. Adept at securing database systems, log correlation, and implementing countermeasures in line with NIST and CIS standards.

• CompTia Security+
• Introduction to Cloud Computing by IBM (Coursera)
• The Complete Cyber Security Course (Udemy)
• Python For Data Science and Machine Learning Bootcamp (Udemy)

Tech Stack: Python, Scikit-learn, Flask, Heroku

• Collected real-world phishing URLs from sources like PhishTank and created feature vectors (e.g., URL length, domain age, HTTPS presence).
• Trained multiple classification models (Random Forest, SVM) achieving 94% accuracy in detecting phishing websites.
• Deployed the model using Flask as a web app and hosted it on Heroku for public access.
• Integrated basic user interface for URL input and classification output.

Tech Stack: Splunk, Windows Logs, Sysmon

• Set up a simulated enterprise environment and collected logs from endpoints using Sysmon.
• Built custom Splunk dashboards and correlation rules to detect brute force attempts, PowerShell abuse, and lateral movement.
• Tuned alerts to reduce false positives and implemented a triage workflow.
• Aligned detection logic with MITRE ATT&CK framework.

Tech Stack: OWASP Juice Shop, Burp Suite, Kali Linux

• Conducted black-box penetration tests on a deliberately vulnerable web application.
• Exploited injection vulnerabilities (SQLi, XSS), authentication flaws, and business logic errors.
• Documented each exploit with risk impact and mitigation strategy in a professional-style pentest report.
• Practiced ethical exploitation using OWASP Top 10 as a guideline.

Member, HackUCF (University of Central Florida's Collegiate Cybersecurity Club)

Actively participate in weekly cybersecurity challenges, Capture the Flag (CTF) competitions, and educational workshops focused on ethical hacking, reverse engineering, network security, and malware analysis. Collaborate with peers to enhance practical skills in both offensive and defensive security practices while staying updated on current cyber threats and trends.