Omkar Raut

University Terrace Drive, Charlotte, NC 28262 · (980) 327-8262 · omkarraut33@email.com

Meticulous cybersecurity graduate student with 3 years of experience seeking an opportunity to pursue a highly rewarding career in cybersecurity whereby I could offer my full potential to the organization and contribute meaningfully to the long-term growth of the company.


Experience

Security Engineer Intern

Amazon

• Devised a framework using Graph Database and data visualization to speed up and increase the accuracy of analysis for complex, multi-dimensional datasets by 80% while also increasing the accuracy of the analysis results by 50%.

• Evaluated high-severity tactics and techniques from MITRE attacks and categorized them against AWS services,improving remediation time by 50% and enhancing the organization’s security posture.

• Mapped 250+ AWS Security Hub Controls to the different techniques and tactics, and gained insights into various AWS services.

• Reduced the time to identify attacks, and implement mitigations by 80% for internal security teams and developers.

May 2022 - August 2022

Associate Security Consultant

Varutra Consulting Pvt. Ltd.

• Trained in web application vulnerability assessment and penetration testing, as well as network, mobile application, API and thick client security testing.

• Reported over 100 vulnerabilities and mitigated in the client’s infrastructure with a possible impact of $200 million and considerably more; Customer’s infrastructures were enhanced and safeguarded, resulting in a $3 million savings.

• Conducted DAST/SAST, ethical hacking, and expertise in exploiting vulnerabilities such as XSS, CSRF, SSRF, Broken Access Control, SQL Injection,Privilege Escalation, XXE and so on.

• Performed client-side and server-side attacks in web applications along with significant hacking countermeasures; also has experience with banking, finance, healthcare, and software industry applications.

• Handled over 30 clients and Implemented security enhancements to the apps, development, and production environments by collaborating with developers and system administrators.

• Experienced in reporting vulnerabilities in a comprehensible document based on their severity and CVSS score.

Nov. 2019 - August 2021

Associate Security Analyst

GFI Informatique India

• Monitored daily network traffic and analyzed logs using LogRhythm SIEM tool, Research and analysis of IOCs from threat intelligence resources.

• Investigated source of malicious network traffic on the host origin and searched for impacted IPs, domains, URLs, hashes, and blocked it on the Perimeter Firewall.

• Created monthly trend analysis, risk assessment, and incident response time reports utilizing bar graphs and pie charts.

• Provided customers with real-time advice on network configuration, access controls, policies, and attack mitigation procedures, reduced escalation and resolution times by 70% resulting in a $50 million cost savings.

Nov. 2018 - Oct. 2019

Education

University of North Carolina at Charlotte

Master of Science
Cybersecurity - Network Security Concentration

GPA: 4.0

August 2021 - May 2023

RMD Sinhgad School Of Engineering

Bachelor of Engineering - Information Technology

GPA: 3.5

June 2015 - May 2018

Skills

Programming Languages
Tools & OS
Burp Suite, OWASP Zap Proxy, Namp, Nessus, Nexpose, SQLmap, Metasploit, Wireshark,Shodan, Nikto, Acunetix, Netsparker, MobSF,Postman, Echo Mirage Hijacker, Frida, FTK Imager, Autopsy, Registry Explorer, Widows, Kali Linux
Expertise
Information Security, Cloud Security, Cryptography, Security Monitoring, Information Assurance, Multitasking, Teamwork, Problem Solving, Customer Service.
Security Frameworks
OWASP,NIST,OSINT

Open Source Contribution

• Participated in the Bug Bounty programs and was also awarded Hall of Fame from many organizations.

• Presented Technical Paper in State Level Paper Presentation in K.J college of Engineering, Pune

• Given talk on Dark/Deep web analysis and OSINT models.

• Taught Web and Network Penetration testing to Interns.

• Writing Blogs on Medium.


Certifications

    • Certified Ethical Hacker
    • OSCP - Ongoing
    • Certified Network Security Specialist