Rahul Mandal.

Lead technical contributor on client-facing security engagements across application, infrastructure, and cloud surfaces.

• Delivered enterprise-grade assessments across web, mobile, API, and thick-client environments aligned with OWASP
• Translated technical findings into business risk for client executives and management
• Managed end-to-end engagements: discovery, scoping, execution, remediation guidance, post-engagement support
• Configured and integrated SAST/DAST tooling within GitHub Actions and GitLab CI pipelines
• Conducted secure code reviews with developer-friendly remediation aligned to Secure SDLC and DevSecOps
• Performed cloud configuration audits across AWS, Azure, and GCP - IAM gaps, misconfigurations, compliance
• Executed red-team and adversary-simulation assessments and presented findings to leadership
• Authored architecture diagrams, threat models, executive reports, and operational runbooks

Two-month Virtual Cyber Security Industry Internship that formalised my transition from full-stack development into application and offensive security.

• Completed the Virtual Cyber Security Industry Internship program in association with VPKBIET, Baramati
• Researched real-world attack surfaces, reconnaissance techniques, and exploitation primitives
• Produced structured technical write-ups translating research into reproducible findings
• Awarded Best Award by SISTMR Australia upon program completion

Built user-facing and backend components for internal and public-facing platforms - gaining the systems intuition I now apply to security review.

• Developed and deployed user-facing and backend components for internal and public platforms
• Gained hands-on experience with web servers, application servers, and XML/SOAP integrations
• Set up and configured development and production environments on Windows and Linux
• Worked with relational databases for application data layers and schema changes
• Collaborated with UI/UX, QA, and backend teams on responsive, accessible applications
• Documented system designs, integration patterns, and deployment procedures for onboarding