Shlok Kshirsagar

>

I am a Masters student at the University of Washington Bothell. Specialized in GRC, vulnerability assessment, penetration testing, and securing infrastructure against cyber threats. Your security is my mission.

shlok@kali-linux:~

01. TECHNICAL EXPERIENCE

Intern - Cybersecurity Advisory Services

AUJAS CYBERSECURITY LTD

Jun 2023 - Dec 2023

Mumbai, India

Performed application security assessments and vulnerability testing, identifying and triaging 50+ risks and driving a 25% reduction in critical vulnerabilities.
Conducted secure code reviews and threat modeling aligned to the OWASP Top 10 to catch flaws early and lower application risk.
Designed and helped implement 10+ security controls mapped to ISO 27001:2022, strengthening defense-in-depth.
Partnered with engineering teams to build security into the SDLC, advising on secure-by-design patterns and remediation.

Cybersecurity Intern

CYBER VIDYAPEETH FOUNDATION

Jun 2022 - Jul 2022

Haryana, India

Accomplished bridging theoretical concepts with practical IoT implementation by creating and deploying 5+ Arduino-based projects leading to hands-on operational experience.
Enhanced awareness of IoT security risks by researching and identifying common vulnerabilities and possible exploitation methods.
Contributed to improving IoT security posture by documenting findings and suggesting countermeasures, enriching internal knowledge bases.

Summer Intern

ERNST & YOUNG LLP

Aug 2021 - Sept 2022

Remote

Improved incident response playbooks for web application compromise and data exfiltration, cutting simulated response times by 15%.
Researched global security standards to strengthen readiness and compliance.

02. TECHNICAL PROJECTS

AegisRecon

A comprehensive, modular reconnaissance framework combining subdomain enumeration, port scanning, and service detection with research-grade metrics for academic thesis validation.

HTMLCSSPythonJavascriptGoogle Gemini APITailwindCSS

InboxGuard

InboxGuard is an AI-powered web application that detects phishing emails using Google’s Gemini API with function calling. It analyzes sender details, links, and manipulative language to generate a detailed risk assessment.

HTMLCSSPythonJavascriptGoogle Gemini APITailwindCSS

Malware Analysis Sandbox

Malware Analysis Sandbox: A secure, isolated environment for cybersecurity professionals to analyze malware using static and dynamic techniques, gaining insights into behavior without risking system integrity.

HTMLCSSVirustTotalCuckoo SandboxJavascript

DeCap

Decentralized Capital is a blockchain-based app for banking, allowing users to securely manage deposits, request loans, and pay debts through a seamless, user-friendly interface for transparent finances.

JavascriptSolidityHTMLCSSMongoDB

Cocktail.exe

A C++ proof-of-concept malware project created for educational purposes, demonstrating persistence, obfuscation, packing, and advanced anti-debugging techniques to showcase key concepts in malware development, evasion techniques, and comprehensive security.

C++UPXEncryptionSHA256