Shubham M.

About Shubham M.

I help organisations identify real security risk before it becomes a breach.I am a cybersecurity professional with 4+ years of experience across offensive security, vulnerability management, and risk-driven remediation for government, defence, academic, and enterprise environments. My work focuses on turning penetration testing results into clear, actionable risk insights that security leaders and engineering teams can actually prioritize.I have led and mentored VAPT teams, delivered large-scale security assessments across web, API, mobile, infrastructure, and cloud environments, and worked closely with developers, architects, and leadership to remediate high-impact vulnerabilities rather than just report them.My background spans advanced penetration testing, cloud and server security, secure configuration reviews, and applied security research in high-assurance environments, including work with national research and defence-focused institutions. I bring a strong balance of hands-on technical depth and strategic understanding of how security decisions affect business and operational outcomes.I believe security programs fail not due to lack of tools, but due to poor prioritization, weak communication, and misalignment between technical findings and business risk. Closing that gap is where I add the most value.I regularly share practical insights on enterprise security, offensive security thinking, and how organizations can move beyond compliance-driven testing toward measurable risk reduction.

Experience

1. Cyber Security Researcher

   HackerOne

   Jan 2026 — Present

Education

• Acropolis Group of Institutions

  Bachelor of Technology - BTech, Computer Science