Pratham Badgujar

About Pratham Badgujar

Cybersecurity Specialist | Red & Blue Teaming | Advanced Threat Defense | Cloud, Data & Infra Security | Deep Threat Intel | Dark Web Recon | Always Evolving Hey, I’m Pratham Badgujar! I help companies stay secure in an environment where attackers move fast, and defenses need to move faster. Whether it’s filtering out an evasive payload, fingerprinting lateral movement via named pipes, or analyzing staged command sequences, I’m usually the guy chasing it down and shutting it off. My journey started out of curiosity: Why do breaches happen even with tools in place? Why does EDR flag nonsense but miss privilege escalation via token impersonation? What does a real attacker actually do post-exploitation? Those questions turned into a mission. I’ve worked across 25+ tools F5 XC, Cortex XDR, FortiWeb, Akamai, Imperva, Guardium, Shadowmap, FortiSandbox, and more. But tools are just weapons. What matters is how you wield them. Mitigated application-layer DDoS using adaptive rate control + behavioral fingerprinting Tuned WAFs for complex apps without breaking logic flow (yes, including.cgi path exclusions, header-based evasion, and JSON-based injections) Reduced EDR false positives by writing tailored detection logic around DLL sideloading and thread injection chains Investigated identity spoofing and trust elevation by tracking token abuse across named pipes, RPC calls, and LSASS memory access Integrated dark web monitoring into alert enrichment — mapping phishing kits, leaked creds, and infrastructure overlaps Used Guardium for query-level tracking inside structured environments spotting unusual joins, temp table abuse, and timing-based inference My offensive work red teaming, bug bounty, simulated breaches keeps me grounded. I’ve found IDORs in production, bypassed rate limits using malformed headers, and exploited misconfigured token validators. And as a certified cyber criminologist, I study attacker psychology. Why social engineering works. How fear, urgency, and familiarity drive clicks. I’ve tracked entire campaigns from spoofed sender to exfil endpoint. I don’t chase alerts, I trace behavior. Previously worked with: QRadar, Splunk, Azure Sentinel, Suricata, Wazuh, Nessus, Rapid7, Qualys, Palo Alto, FortiGate, and Cisco gear. Outside of all this yeah, I sing, play tabla, keyboard, flute, drums, and guitar. I read about space, quantum physics, and AI alignment🤖. If you’re building something critical something worth defending I’d love to talk. Security is a mindset. And I live in that headspace every single day.

Experience

1. Senior Associate Information Security Analyst

   NTT DATA, Inc.

   May 2025 — Present · Mumbai, IN

Education

• North Maharashtra University

  Bachelor's of Science