Varun Rajput

About Varun Rajput

Hi, I’m Varun Rajput, a passionate Cybersecurity & GRC Analyst with hands-on experience across Governance, Risk & Compliance, ISO 27001:2022 implementation, and technical cybersecurity practices.I hold a B.Tech in Cybersecurity & Digital Forensics (Sage University, Bhopal) and am currently pursuing M.Tech in Cybersecurity at People’s University, Bhopal — building a strong foundation in both security governance and defense operations. Over the past few years, I’ve gained practical experience through multiple internships — from conducting risk assessments and creating ISMS documentation to learning SOC fundamentals, SIEM monitoring, and vulnerability analysis. My projects include:Implementing a mini ISMS model aligned with ISO 27001 controls.Building a compliance dashboard for NIST CSF 2.0 mapping.Designing a vendor risk register and non-conformity tracker.Developing Django-based applications with secure authentication.🧩 Technical & GRC Tools: Python, SQL, SIEM, Nmap, Wireshark, Nessus, ServiceNow, Jira, Archer, Excel, Power BI I’m continuously learning frameworks like ISO 27001, NIST CSF, GDPR, and SOC 2, aiming to help organizations strengthen their information security posture through structured governance and risk management. I’m open to internship or entry-level opportunities in GRC, Information Security, or Cyber Risk Management — where I can contribute to policy development, risk analysis, and compliance audits while continuing to grow as a cybersecurity professional.

Experience

1. Vapt Analyst Intern

   Petadot System & Security

   Feb 2026 — Present

   Currently working as a VAPT Analyst Intern, gaining hands-on experience in Web Application Security and Vulnerability Assessment.I am actively involved in identifying and exploiting security vulnerabilities such as XSS, SQL Injection, IDOR, and authentication flaws in web applications. I perform both manual and automated security testing and prepare detailed VAPT reports with risk analysis, proof of concepts (PoC), and remediation recommendations.Alongside my internship, I continuously enhance my cybersecurity knowledge through research on latest threats, vulnerabilities, and attack techniques. I also develop Python-based tools to automate security testing tasks and improve efficiency.Skills: Web Application Security, OWASP Top 10, Burp Suite, Nmap, Python, LinuxI am currently looking for entry-level opportunities in Cybersecurity / VAPT / SOC where I can apply my practical skills and grow in the field.

Education

• People's University

  Master of Technology (M.Tech), Cybersecurity

• Sage University

  Bachelor of Technology (Honors), Computer Science & Engineering — Cybersecurity & Digital Forensics