Hitesh Patra
Security Researcher
Security Researcher
Hitesh Patra
Experienced IT Security Researcher with 3+ years of expertise in securing networks, web, mobile, and cloud platforms. Proven record of reporting 500+ vulnerabilities and advancing product security through threat modeling, penetration testing, and vulnerability research. Passionate about tackling complex security challenges and driving innovative solutions in a rapidly evolving threat landscape.
What I Do
Testimonials
Absolutely hardworking and dedicated in professionalism. Thorough understanding of scope and working towards strategic plan is one of the key role. Identification of threats and exploiting the vulnerabilities in web Appsec is his core area.
I had the privilege of working closely with Hitesh on several cybersecurity projects, and I can confidently say that He is an outstanding Tester , Great Team asset, Constant learner , and a great human being whom anyone will love to share the cubicle.
Achievements
Patent
ASSET CRAWLING WITH INTERNET ARCHIVES FOR ENHANCED WEB APPLICATION SCANNING - US Patent Filed with No. FOR-474Capture The Flag Contest
Won 10+ CTF contests and Hacking challenges.Hackerearth's Challenge
Top 10 in Hackerearth's Cybersecurity Problem Setter ChallengeCertifications
Fun Facts
Bug Bounty HoF
200+Pentest Completed
340+CTF's Won
14Resume
Experience
Feb, 2024 - Present
Fortinet Technologies India Pvt. Ltd.Security Researcher - II
• Working on FortiDAST - Dynamic Application Security Testing tool.
• Product Security Testing - Web Application (DAST) and (SAST) for major Fortinet products.
• Vulnerability Research and Exploit development in Lua and Python to fit in Fortinet scripting engine (FSE) for
disclosed and undisclosed CVE’s based on CVSS scoring.
• Analyzing recent impactful CVE’s and implementing the detection of OBA (Outbreak Alert) in FortiDAST.
• Hands-on Threat Modelling and Secure Code Review of multiple Fortinet products.
• Hands-on Cloud Configuration Review on AWS, Azure and Network Architecture Review for Fortinet Cloud
products.
• Hands-on experience in External Network Penetration Testing, API Review, Firewall Review, Secure code
review.
• Research on Fuzzer and crawler enhancements for efficient scanning and detection capabilities.
• Proficiently working with the development team to address security issues.
• Strong Management skills while handling multiple Comprehensive Security Review projects.
Nov, 2022 - Feb, 2024
Fortinet Technologies India Pvt. Ltd.Security Researcher - I
• Working on FortiDAST - Dynamic Application Security Testing tool.
• Product Security Testing - Web Application (DAST) and (SAST) for major Fortinet products.
• Hands-on experience in External Network Penetration Testing, API Review, Firewall Review, Secure code
review.
• Research on Fuzzer and crawler enhancements for efficient scanning and detection capabilities.
Nov, 2021 - Oct, 2022
Deloitte Touche Tohmatsu India LLPRetainer Analyst (Risk Advisory)
• Worked on Risk Advisory, Cyber and Strategic Risk domain.
• Hands on practical knowledge of Vulnerability Assessment and VAPT of Web Applications and Android Applications (SAST and DAST) in India’s top financial banks.
• Hands on experience on External Network Penetration Testing, REST API Review, Secure code review.
• Has to carry out Threat Modelling for client applications.
• Has to carry out Secure Network Architecture Review (SNA).
• Has to carry out Secure Configuration Review (SCR) and Firewall Review.
• Has to carry out manual and automated testings.
• Consulting the clients with the best security measures and help them fix the vulnerabilities efficiently.
• Strong Management skills while handling multiple Comprehensive Security Review projects.
May, 2021 - Oct, 2021
Hacktify Cybersecurity LLP.Security Analyst Intern
• Worked on Web Application Vulnerability Assessment and Penetration Testing.
• Worked on live simulation of Vulnerable Web Application Labs.
• Built set of vulnerable machines, CTF Challenges, VAPT reports and Cybersecurity blogs.
Mar, 2020 - Present
VULNCON Security Conference & TrainingsOrganizer
• Conducting Cybersecurity Training, CTFs, Conference and exhibition annually in Bangalore.
• Conducting International CTF contests and International Security Conference VULNCON in Bangalore, India.
• Leading a strong and determined team of more than 30 security professionals to make an impact within Infosec
communities in India.
Education
Jul, 2018 - July, 2022
Lovely Professional University, PunjabB. Tech - CSE
Graduated with Bachelor in Computer Science & Engineering from Lovely Professional University, Jalandhar, Punjab.
April, 2016 - Mar, 2018
Vikas Residential School, BBSR+2 Science, CBSE
Completed +2 Science schooling from Vikas Residential School, Bhubaneswar, Odisha.
Specialization
Web/API Security
External/Internal Pentest
Secure Code Review
Mobile Pentesting
Threat Modelling
Network Architecture Review
Automation
Secure SDLC
Cloud Configuration Review
Cloud/Networking
AWS
Azure
GCP
Docker
Vagrant
Ansible
Coding Skills
Python
LUA
Bash
C
Javascript
Tools
- Fortify SCA
- BurpSuite
- Nessus
- Git
- Metasploit
- nmap
- mimikatz
- frida
- adb
- Rubeus
- Objection
- Qualys
- Accunatix
- Semgrep
