subhojit C.
Mid-Level Cybersecurity Analyst
Open to offersNew to PlatformAbout
Subhojit C. is a Cybersecurity Analyst with a focus on enterprise, web, and blockchain security, based in Bangalore. He has led VAPT (Vulnerability Assessment and Penetration Testing) projects at Softcell Global Technologies and delivered security solutions for clients via Upwork and Dataspace Academy. His expertise spans penetration testing, red teaming, SOC operations, and web application security, including the detection and exploitation of OWASP Top 10 vulnerabilities such as SQLi and XSS. Subhojit has conducted WordPress security audits, implemented SOC monitoring using Splunk and ELK, and has hands-on experience in incident response, digital forensics, and IDS/IPS evasion. He contributed to blockchain security research published by Springer and developed decentralized applications for secure IoT access management. Through responsible disclosure, he has reported critical vulnerabilities to organizations like NASA, BMW, and Uber. Subhojit holds certifications including CRTA, ISO Lead Auditor 27001, SSCP, and IBM Cybersecurity Analyst.
Experience
Cybersecurity Analyst VAPT
Softcell Global Technologies · 2025 — PresentHandled end-to-end VAPT projects for web, API, and enterprise network systems, which involved exploiting OWASP Top 10 vulnerabilities, focusing on threats such as SQLi, XSS, IDOR, SSRF, and RCE. Performed API security assessments for issues like JWT flaws, BOLA, broken authentication, and parameter manipulation. Prepared VAPT documentation that included PoCs on IDS/IPS evasion, red team attack simulations, CVSS scoring, risk classification, and remediation checks.WordPress Security Analyst
Kara Creatives · 2025 — 2025Examined WordPress installations for SQLi, XSS, and brute force vulnerabilities through comprehensive security audits. Implemented hardening steps such as WAF configuration, enabling 2FA, deploying SSL/TLS, and managing secure plugins to strengthen WordPress environments.Cybersecurity Intern
CCOE, UEM · 2025 — 2025Carried out penetration testing and vulnerability assessments for enterprise-level clients, handled SOC monitoring and incident response using Splunk and ELK, and contributed to digital forensic investigations. Developed PoCs related to IDS/IPS evasion and orchestrated red team attack scenarios.Cybersecurity Analyst (Freelancer)
Upwork · 2024 — 2024Conducted red team assessments replicating real-world attack methodologies and assisted with blockchain security efforts in test scenarios. Supported senior practitioners by participating in the development of attack-defense frameworks tailored for organizational applications.Cybersecurity Analyst (Freelancer)
null · 2023 — PresentDelivered VAPT services for international clients with an emphasis on web application security and the removal of malware. Managed incident response actions, implemented remediation plans, and provided ongoing cybersecurity support.Independent Security Researcher
nullSubmitted security reports identifying critical vulnerabilities to organizations such as NASA, BMW, Uber, and InDrive through responsible disclosure initiatives.
Skills & Expertise
Education
- B.Tech in Computer Science & Engineering (CSE)Institute of Engineering & Management (IEM)
Interested in this professional?
Sign in as an employer to save this profile or invite subhojit C. to a job.
Sign in as an employer