Cybersecurity Engineer

I buildSecureSystems.

X 000.000Y 000.000Z 000.000

Cybersecurity engineer focused on application security, cloud security, detection and response, and DevSecOps.

View workTechnical papers
  • Application Security
  • Cloud Security
  • Detection & Response
  • DevSecOps

India / 2026

02 / PROFILEIndia // 2026
Ayush Kumar avatar

Ayush Kumar

Cybersecurity Engineer

Cybersecurity Engineer

Ayush Kumar is a cybersecurity-focused B.Tech IT student based in India. He specializes in application security, cloud security, dynamic vulnerability scanning, and security automation.

His work centers on engineering resilient defensive tooling, conducting thorough application security evaluations, and building automated threat detection pipelines across modern cloud and hybrid environments.

FOCUS AREAS

  • Application Security
  • Cloud Security
  • Detection & Response
  • DevSecOps
03 / SELECTED WORKEXHIBITS 01–03
01

HEARTH

END-TO-END ENCRYPTED, SELF-HOSTED PRIVATE FORUM

Private, invite-only forum for small trusted groups that lives on its members' own devices — no company, no third-party accounts. Every member runs the same Python node; posts and photos are end-to-end encrypted with a libsodium group key, signed and hash-chained into per-member append-only logs so forged or altered entries are rejected, and synced through a hardened always-on home node reachable via port forwarding, WireGuard, or Tailscale Funnel.

PythonlibsodiumEnd-to-End EncryptionAppend-Only LogsSelf-Hosted
500+Automated Tests

METHOD: pytest suite run in CI on Linux, Windows and macOS

IN-PROGRESS
02

AEGIS

SINGLE-BINARY EDGE PROXY & RATE-LIMITING GATE

Single Go binary deployed as a reverse proxy in front of HTTP applications — inspecting requests, rate-limiting clients per IP and time window, and forwarding only what passes its SQL injection, XSS, and path traversal rules. Ships with an observe mode that audits would-be blocks, an enforce mode that applies them, and a built-in terminal UI.

GoReverse ProxyRate LimitingRequest FilteringSelf-Hosted
IN-PROGRESS
03

AWS Threat Detection

CLOUD TRAIL & VPC LOG ANALYSIS PIPELINE

Threat detection and incident response pipeline analyzing AWS CloudTrail and VPC Flow logs to detect suspicious activity mapped to MITRE ATT&CK techniques.

AWS CloudTrailGuardDutyPythonSIEMDetection Engineering
COMPLETED
04 / EXPERIENCETIMELINE // ROLES & ENGAGEMENTS
EXP_01Aug 26' — Present

Software Engineer

Raidcloud Technologies

Engineered and secured critical full-stack workflows for the core enterprise application, implementing stringent input validation pipelines and executing comprehensive dependency audits to neutralize vulnerabilities.

India
ACTIVE
EXP_02Mar 26' — Present

Domain Coordinator

Google Developer Groups

Spearheading cloud architecture and DevOps initiatives for the GDG On-Campus chapter, driving technical enablement and championing modern infrastructure practices.

Kolkata, India
ACTIVE
EXP_03Sep 26' — Present

Creative Director & Founder

Meridian Studio

An independent design studio crafting premium digital resources and scalable visual systems for modern creators, professionals, and digital brands.

India
ACTIVE
* Roles are listed only with verified details — entries appear as they are confirmed.
05 / TECHNICAL PAPERSARCHIVE // RESEARCH & REPORTS
* Select a paper to read it here, or download the PDF.
06 / CAPABILITIESTECHNICAL COMPETENCIES
GROUP // 01

Application Security

Black-box pentesting and API vulnerability chaining, from recon to exploit path.

Core skills // 4 items
  • Black-Box Web App Penetration Testing (OWASP, PTES)
  • API Authentication & Authorization Flaw Analysis
  • Vulnerability Chaining & Blast-Radius Assessment
  • CVSS Scoring & Findings Reporting

Tap a domain to switch the detail panel and preview its marquee.

* Evaluated against practical hands-on capability & interview readiness.
07 / CREDENTIALSVERIFICATION & PRACTICE
Nov 24VERIFIED

Formal certification // Google

Google Cybersecurity Certificate

View credential ↗

Security Researcher

Bugcrowd

Crowdsourced Security Research & Vulnerability Disclosure

Open platform ↗

Hands-on Practice

TryHackMe

Offensive & Defensive Security Labs

Open platform ↗

Hands-on Practice

Hacker101

Web Security & Capture The Flag (CTF)

Open platform ↗

* Certifications are verified where linked. Lab platforms are continuous hands-on practice — not formal credentials.

08 / CONTACTINQUIRIES & COLLABORATION
NODE_COMM // CONNECTX 200.000Y 176.000Z 150.000

DIRECT COMMUNICATION

Initiate Contact.

Available for technical security discussions, vulnerability analysis, and security engineering roles. Primary focus: Application Security, Cloud Defense, and DevSecOps.

EMAILiffayush.work@gmail.comLINKEDINlinkedin.com/in/iffayushGITHUBgithub.com/iffayush
LOCATION // INDIA (UTC+05:30)