Recruiter brief · 77Pseudo

Prathamesh Tikle

Cybersecurity · Offensive Security · Security Engineering

Pune, Maharashtra, India

Full experience →

Summary

Computer Engineering student in Pune working on offensive security and security engineering. Recent builds: an IPsec capture analyser, an ATT&CK-mapping honeypot and a document-forensics engine. Current research: Android malware.

Open to: Penetration testing, Offensive security, Security engineering, Malware analysis, Security research.

Experience & leadership

Cyber Security Mentor · DevTown

Jul 2026 – Present
  • Delivered web-vulnerability bootcamps.
  • Facilitated root-cause PHP code analysis for SQL injection, XSS and CSRF.

Cadet Intern · Secur Wires Technologies

Feb 2026 – Apr 2026
  • Performed project-based vulnerability analysis on API security controls.
  • Worked with GRC compliance frameworks.

Technical Operations Engineer · Ceres Canopus Pvt Ltd

Sep 2024 – Oct 2024
  • Built Python scripts and n8n workflows for lead ingestion.
  • Accelerated onboarding throughput by 30%.

President · Cyber Security Club

  • Conducted cybersecurity workshops and technical bootcamps.
  • Delivered practical sessions on web-security vulnerabilities and penetration-testing concepts.

Projects

MALINT-X · Independent research project

Active research

A research project that investigates Android malware through static and dynamic analysis, systematic feature extraction and intelligent (ML-assisted) analysis.

Python · Android tooling · Static analysis · Dynamic analysis · Machine learning

SocketSnoop AI · Competition build

Working prototype

An AI-assisted deception honeypot. A convincing decoy company site leads attackers to a fake admin surface and an emulated shell. Every command is mapped to MITRE ATT&CK in real time, and each session produces an attacker-intelligence card.

Python · asyncio · WebSockets · aiohttp · SQLite · Gemini API · AbuseIPDB · source · demo

IPsec Sentinel · Smart India Hackathon 2026 · Problem statement 160 · Team Highlanders

Advanced build

Passive IPsec protocol analysis and security assessment. Give it a packet capture and it returns a graded, cited assessment of every VPN tunnel in it, plus a ready-to-review configuration change for the weak ones.

Python · Pydantic · scikit-learn · SHAP · strongSwan · Docker · pcap / IKE / ESP · source

Upastithi

In development

A construction-workforce attendance application built with TypeScript and Supabase. It covers authenticated check-in, and it explores IoT-assisted presence verification for sites where shared devices and proxy attendance are common.

TypeScript · Supabase · PostgreSQL · Authentication · IoT concepts

VeriFlow

Live demo

An offline, deterministic document-forensics engine for bank underwriting. It checks loan-applicant packets (salary slips, bank statements, employment letters, ITRs) for tampering, inflated figures and chronological anomalies, and every flag comes with its evidence and its arithmetic.

Python · FastAPI · PyMuPDF · OpenCV · NumPy · EasyOCR · Pydantic v2 · source · demo

Panoptes · Bank of Maharashtra Hackathon · Problem statement PS1

Hackathon prototype

A detection platform for privileged-access misuse and insider threats. It baselines each user against their peer group, models action sequences, enforces real OPA policy decisions and protects its own audit trail with post-quantum cryptography.

Python · FastAPI · scikit-learn · OPA / Rego · ML-KEM-768 · ML-DSA-65 · SQLite · source

Skills

Applied: used to build real work. Practised: labs, training, teaching.

Offensive Security
Applied: Custom Python offensive tooling, Capture the Flag. Practised: Web application security testing, SQLi / XSS / CSRF root-cause analysis, Burp Suite, Penetration-testing methodology, Nmap, Metasploit.
Network Security
Applied: IPsec / IKEv1 / IKEv2 analysis, Packet capture analysis, Honeypots and deception, VPN configuration hardening. Practised: Wireshark, Linux and Kali Linux, Network vulnerability assessment.
Malware Analysis
Applied: Digital document forensics, Error Level Analysis (ELA).
Security Research
Applied: Standards-based protocol assessment, MITRE ATT&CK mapping, Attacker behaviour profiling, Post-quantum cryptography, Explainable ML for security.
Programming & Development
Applied: Python, FastAPI, JavaScript / TypeScript, React + Vite, SQL, Supabase, Flutter / Dart, Git and GitHub. Practised: Node.js / Express, C++, Firebase.
Security Engineering
Applied: Detection engineering (anomaly models), Policy as code (OPA / Rego), Threat-intel integration, SIEM-ready output (CEF / LEEF / syslog), Docker, Workflow automation (Python, n8n). Practised: GRC and compliance frameworks.

Certifications

  • CompTIA Security+, CompTIA (Passed)
  • Google Cybersecurity Professional Certificate, Google (Completed)
  • Web Security Academy, PortSwigger (Apprentice-level labs completed)
  • AI Security & Governance, Securiti (Certified)
  • Geo-data Sharing and Cyber Security, ISRO · IIRS (Completed)
  • Enhancing Soft Skills and Personality, NPTEL (Elite + Silver)
  • Technical English for Engineers, NPTEL (Completed)

Achievements

  • 1st place, solo, DPCOE HackFest 2026: CTF challenge
  • Student Excellence Award 2026, ZSkillUp · Saksham Bharat · FTPO

Education

Bachelor of Engineering, Computer Engineering, Dhole Patil College of Engineering (Savitribai Phule Pune University (SPPU)). Specialisation: Information and Cyber Security.