Nihal Hasain C – Aspiring Security Professional

Hello, I'm

And I'm a Aspiring Security Professional

Aspiring Cybersecurity Professional exploring VAPT, SOC Operations, Network Security, Web Application Security, and Threat Detection through hands-on labs, projects, and continuous learning.



Nihal Hasain
0+
Global
Certifications
0+
Security Tools
0+
Hands-On
Projects & Labs
0%
Passion for
Data Protection

My Background

2023 - 2026

Bachelor of Computer Applications

Bengaluru North University

Building foundations in CS, Networks, and OS Security.

2021 - 2023

Higher Secondary Education

GMHS Perinthalmanna

Computer Science focus.

Technical Skills

SOC & Defensive Security
Log Analysis Alert Triage Phishing Detection Incident Response SIEM Basic Threat Detection Security Monitoring
Network Security
TCP/IP IPv4/IPv6 Ports & Protocols Network Scanning Traffic Analysis DNS HTTP/HTTPS Firewall Concepts
VAPT & Offensive Security
Reconnaissance Vulnerability Assessment Web Application Security OWASP Top 10 SQL Injection Authentication & Authorization Testing Session Management Directory Enumeration Security Misconfiguration Basic Exploitation
Operating Systems
Linux Windows Windows Security Firewall Configuration

Security Tools

VAPT / Offensive
Nmap Burp Suite Gobuster Metasploit Nikto Hydra
Network Analysis
Wireshark Nmap nslookup
SOC / Blue Team
Splunk Windows Defender Windows Firewall Windows Event viewer SIEM

Certifications

Google Cybersecurity Professional
IBM Cybersecurity Analyst
Tata Cybersecurity Analyst (Forage)
Mastercard Cybersecurity (Forage)

Professional Experience

Cyber Security Intern

Biztras IT Solutions | Aug 2026 - Current

▼

Cyber Security Intern

Elevate Labs | Nov 2025 - Dec 2025

▼

Hands-On Labs

SOC Alert Investigation

▼

In a simulated Security Operations Center (SOC) environment, performed hands-on alert triage and incident investigation using SIEM and endpoint telemetry data. The lab environment included Splunk SIEM, Sysmon logs, firewall traffic logs, and email security telemetry. I analyzed multiple security alerts involving phishing attempts, suspicious outbound connections, and process activity anomalies.

SOC Investigation Activities:
  • Investigated phishing emails and suspicious external domains using Splunk SIEM.
  • Correlated email alerts with firewall logs to determine blocked vs allowed user interactions.
  • Analyzed network telemetry including IP addresses, URL access attempts, security rules, and connection status.
  • Reviewed Sysmon Event ID 1 logs to assess parent-child process relationships and command-line activity.
  • Classified incidents as True Positive (Prevented/Escalated) or False Positive based on evidence-driven analysis.
SOC alert triage Firewall log correlation SIEM log investigation

VAPT & Web Security Lab

▼

Hands-on experience conducting vulnerability assessment and penetration testing in authorized lab environments and CTF platforms. Practiced the complete security testing workflow, from reconnaissance and enumeration to vulnerability identification, exploitation, and documenting findings.

Activities:
  • Conducted network reconnaissance and service enumeration using Nmap to identify open ports, running services, and exposed technologies.
  • Performed web application enumeration and testing using Burp Suite, Gobuster, cURL, and manual analysis of application endpoints.
  • Tested for SQL injection, authentication bypass, session management, access-control, and other OWASP-based vulnerabilities in controlled applications.
  • Performed SMB enumeration using enum4linux and smbclient, including anonymous access testing and analysis of exposed files and user information.
  • Conducted SSH security testing using Hydra in authorized lab environments after identifying valid usernames and services.
  • Used Metasploit, SearchSploit, and other security tools to validate vulnerabilities, understand exploitation techniques, and document findings with evidence and remediation considerations.
Burp suite metasploit

Featured Projects

Hybrid Phishing Detection System

Hybrid Phishing Detection System A multi-layer phishing detection application built to identify suspicious URLs by combining machine learning, rule-based analysis, domain inspection, and threat intelligence. The system provides a unified analysis result while maintaining URL history and an administrative interface for managing and improving the detection model.

PYTHON FLASK SECURITY
View Site↗

PassIntel — Password Security Toolkit

A Python-based password security toolkit designed to analyze password strength and demonstrate common password-security concepts. It also includes a personalized/custom wordlist generator that can create wordlists from user-provided information for authorized password-security testing and educational lab environments.

PYTHON CRYPTO SECURITY
View Site↗

Phishing Training Simulator – Behavioral Security Awareness Platform

An interactive cybersecurity training system that simulates real-world inbox phishing attacks within a realistic email interface to train users in identifying and responding correctly to phishing emails by simulating authentic inbox environments with behavioral scoring.

PYTHON Flask SQLit HTML
View Site↗

Let's Work Together!

Actively seeking Security roles.

+91 9048652406
Bengaluru, India