SUMIT
SHARMA
Cybersecurity Security Engineer & Full-Stack Builder
B.Tech in Cybersecurity at Sanskriti University (Graduating 2026). Currently serving as IT Infrastructure & Security Administrator at Govardhan Institute for Vedic Education, securing 100+ enterprise endpoints, managing Active Directory domains, and engineering autonomous offensive AI security frameworks.
Type 'help' to inspect all available operator commands, or use tab-completion.
OPERATOR PROFILE & EXPERIENCE
SUMIT SHARMA
Junior Security Analyst
Vrindavan, Uttar Pradesh, IN
Lead technical and operational security management for campus enterprise systems, safeguarding infrastructure for 100+ active users.
- Configured and maintained Active Directory domains, group policies (GPO), and Azure Role-Based Access Control (RBAC) to enforce least privilege principles.
- Deployed enterprise endpoint detection and response (EDR) agents, reducing malware alerts by 80% through strict application allowlisting.
- Architected automated offsite backup routines for mission-critical databases, achieving zero data loss during simulated recovery drills.
- Managed edge firewall rules, VLAN segmentations, and remote access VPN tunnels with multi-factor authentication (MFA).
- Conducted regular vulnerability assessments using Nmap and OpenVAS, triaging security patches and hardening Windows/Linux servers.
WHAT I'M WORKING ON RIGHT NOW
Focusing on Active Directory lateral movement, Kerberoasting, and BloodHound domain graph analysis.
Writing infrastructure-as-code scripts to enforce zero-trust storage account configurations.
Connecting LangChain/Llama models with local Nmap and Metasploit RPC for autonomous audit generation.
Ready to contribute immediately to Blue Team, SOC Analysis, Penetration Testing, or Cloud Security roles.
INTERACTIVE SKILL MATRIX & TOOLING
Wireshark & Packet Analysis
Security & SOCDeep packet inspection (DPI), anomaly detection, and decrypting TLS streams for malware traffic forensics.
Nmap Network Scanning
Penetration TestingHost discovery, port scanning, OS fingerprinting, and NSE scripting for vulnerability verification.
Metasploit Framework
Penetration TestingProof-of-concept exploitation, staging Meterpreter listeners, and post-exploitation privilege assessment.
Burp Suite & Web Security
Penetration TestingIntercepting HTTP/S proxies, SQL injection verification, XSS fuzzing, and CSRF token analysis.
Kali Linux / Arch Linux
Security & SOCPrimary offensive & defensive terminal environment, forensic tool suites, and system kernel tuning.
Azure Cloud Security & RBAC
Cloud & InfrastructureStorage account encryption, SAS token governance, Defender for Cloud, and conditional access policies.
Python for Security & Automation
Development & AutomationBuilding offensive AI agents, asynchronous network port scanners, socket listeners, and SIEM parsers.
Bash & Linux Shell Scripting
Development & AutomationCron automation, Linux server hardening, automated iptables rules, and log aggregation pipelines.
Node.js, TypeScript & WebSockets
Development & AutomationBuilding high-performance interactive web tools, low-latency telemetry dashboards, and API servers.
SELECTED SECURITY PROJECTS
Red Team Agentic AI
Autonomous Offensive Security Agent & Vulnerability Auditor
An autonomous offensive security agent framework that leverages large language models combined with deterministic security tool calling (Nmap, Nikto, SearchSploit). It performs multi-stage, non-destructive perimeter reconnaissance, maps CVE attack graphs, and drafts comprehensive executive remediation reports automatically.
Cyber-Ops Command Center
Full-Stack Security Operations & Cyber Telemetry Interface
Personal cybersecurity portfolio engineered as a tactical cyber command center. Integrates an authentic Linux terminal CLI with tab-completion and history, live security tooling mini-apps, real-time collaboration canvas, and floating AI assistant.
Azure Cloud Security Hardening
Enterprise RBAC, Storage Encryption & Compliance Architecture
Comprehensive blueprint and implementation for hardening Azure Storage and compute infrastructure against unauthorized data exfiltration, lateral movement, and misconfiguration vulnerabilities.
SYNCVERSE — Real-Time Authoritative Engine
High-Frequency WebSocket Synchronization for Threat Visualizers
Low-latency, authoritative state synchronization engine designed for real-time collaborative threat diagrams, distributed canvas doodles, and live operational intelligence telemetry.
PORT SCANNER & PACKET ANALYZER
SIMULATED PORT SCANNER & PACKET ANALYZER
Interactive offensive security reconnaissance & SYN probe telemetry