Rohan Bodas

•Perform Web, API, Mobile, and Network Vulnerability Assessments and Penetration Testing (VAPT) for enterprise clients across banking, aviation, and telecom sectors.
• Conduct manual penetration testing and exploitation to identify critical vulnerabilities and provide remediation recommendations.
• Perform Active Directory and internal network security assessments using industry-standard tools and attack methodologies.
• Prepare technical security reports and present findings to clients, supporting remediation and risk mitigation.
• Work directly with international clients (UAE & Africa) and participate in regular security discussions and project calls.

•Monitored and analyzed security events using Microsoft Sentinel and Palo Alto Cortex XDR.
•Investigated and responded to alerts, incidents, and endpoint threats following predefined playbooks and incident response procedures.
•Performed log analysis, threat hunting, and correlation using SIEM platforms to identify suspicious behavior.
•Escalated critical incidents, conducted root cause analysis, and coordinated with L3/IR teams for containment.
•Used tools like Wireshark, VirusTotal, and MITRE ATT&CK for enrichment and threat
intelligence.
•Documented incidents, maintained ticketing systems, and ensured SLAs were met for
•Created and improved use cases and detection rules to enhance SOC efficiency and
reduce false positives.

VAPT

Performed black-box and gray-box penetration testing across web, API, mobile,
network, and Active Directory environments.
Conducted red team operations including AD attacks (Kerberoasting, Pass-the-
Hash/Ticket, ACL abuse, ADCS abuse ESC1-ESC8) using SharpHound, BloodHound,
PowerView, SharpView, Impacket, Responder, and Certify.
Simulated adversary behavior with C2 frameworks (Cobalt Strike, Sliver, Mythic) for
post-exploitation, persistence, and lateral movement.
Applied OSINT, reconnaissance, and exploitation methodologies aligned with MITRE
ATT&CK to emulate real-world threats.
Delivered risk-based reports with CVSS scoring and actionable remediation for
stakeholders.