Hello World I am _
Sulav
Adhikari
SOC · Security Operations · Vulnerability Management · Application Security · Cloud Security · AI Security
Scroll
Who
Am I?
I'm Sulav Adhikari, an Associate Cybersecurity Engineer at EK Solutions Pvt. Ltd. (EKBana) specializing in Security Operations (SOC), vulnerability management, application security (AppSec), cloud defense, and AI-assisted security workflows. Having successfully progressed from Cybersecurity Intern into my current associate engineering role, I actively focus on alert analysis, incident triage, continuous vulnerability remediation, and embedding security across the software development lifecycle (SSDLC).
Alongside my engineering role, I am completing my Bachelor's degree in Computer Science and Information Technology (BSc. CSIT) at Asian College of Higher Studies (ACHS), Lalitpur, where I serve as President of the ACHS Club. I previously completed the comprehensive HackStart Pro offensive security program at DanpheLink and developed a custom SSL/TLS Tunneling VPN.
Technical Arsenal
Security Operations Advanced
SOC operations, SIEM, security monitoring, alert analysis, log analysis, incident triage, incident response, event investigation
Vulnerability & AppSec Advanced
Vulnerability assessment & management, security scanning, OWASP Top 10, API security, secure coding, SAST, DAST, SCA, secret scanning, SSDLC
Infrastructure & Identity Advanced
Endpoint security, network security, cloud security, IAM, MFA enforcement, privileged access management (PAM), user access reviews
Security Governance Intermediate
Cybersecurity risk management, security policies, documentation, audit support, compliance support, risk register, incident documentation
Automation & AI Security Advanced
Security automation, Python/Bash scripting, AI security, AI-assisted security analysis, log summarization, AI secure code review, prompt injection defense
Networking Advanced
TCP/IP, DNS, HTTP/S, subnetting, firewalls, VPNs, wireless protocols, SSL/TLS tunneling
Linux & Windows Advanced
Kali Linux, Ubuntu, Windows AD basics, command-line, permissions, file systems
Penetration Testing Intermediate
OWASP Top 10, Metasploit, Burp Suite, vulnerability assessment, exploitation techniques
Web Security Intermediate
SQL Injection, XSS, CSRF, IDOR, authentication bypasses, directory brute-forcing
Scripting & Tools Intermediate
Python automation, Bash scripting, Wireshark, Nmap, Nessus, Bloodhound
Reporting Advanced
Vulnerability report writing, findings documentation, risk analysis, stakeholder communication
Core Tools & Technologies
Professional Experience
Associate Cybersecurity Engineer
Executing security operations center (SOC) activities, proactive security engineering, log analysis, and vulnerability management across applications, APIs, cloud, and enterprise infrastructure in cross-functional collaboration with development, DevOps, and systems teams.
- SOC & SIEM Operations: Real-time security monitoring, alert analysis, event investigation, log analysis, incident triage, and escalation response.
- Vulnerability Management: Conducting vulnerability assessments, automated scanning, and tracking remediation for infrastructure, cloud, and APIs.
- AppSec & SSDLC: Embedding security throughout the development lifecycle using SAST, DAST, SCA, secret scanning, and addressing OWASP Top 10 risks.
- Infrastructure & Identity: Hardening network, endpoint, and cloud environments; auditing access controls, MFA, and privileged accounts.
- Security Automation & AI: Developing Python and Bash scripts for alert triage, log summarization, and AI-assisted security analysis workflows.
- Risk & Incident Governance: Maintaining security risk documentation, audit support, incident response tracking, and executive security reports.
Cybersecurity Intern
Served as Cybersecurity Intern supporting daily SecOps, security monitoring, vulnerability assessments, access governance, and departmental documentation.
- SecOps & Alert Monitoring: Monitored security alerts across endpoints, servers, applications, cloud, email, and security tools with detailed observation logs.
- Vulnerability Assessment: Performed vulnerability assessments and scanning, tracking findings registers and remediation progress.
- Identity & Access Reviews: Conducted user access reviews, enforced MFA compliance, and maintained records of privileged access accounts.
- Incident & Continuity Support: Supported incident triage, documented containment procedures, and verified business continuity / backup security.
- AppSec & Awareness: Supported secure software development, OWASP Top 10 / API security awareness, and SAST/DAST/SCA/secret-scanning concepts.
- Governance & AI Automation: Maintained security policies, risk registers, and audit evidence; supported phishing simulations and AI security automation.
VAPT Internship
Demonstrated dedication, professional growth, technical understanding, and hands-on skills in offensive cybersecurity and penetration testing methodologies.
- Vulnerability Assessment Methodologies
- Web Application Penetration Testing
- Network Penetration Testing
Certifications & Training
HackStart Pro — Cybersecurity Training
Comprehensive beginner-to-pro offensive security program. Completed 15 June 2025 – 31 January 2026.
- Network Penetration Testing
- Active Directory Attacks
- Web Application Security (OWASP)
- Wireless Attacks & WPA2 Cracking
- Privilege Escalation & Post-Exploitation
- Professional Pentest Reporting
Treasurer
Managed club finances and budgeting, overseeing income and expenditure records. Ensured transparent financial reporting and helped organise club events.
President
Leading the college club, organizing academic events, workshops and student engagement initiatives since January 2026.
CTF & Hands-on Practice
TryHackMe
Active Learner | Hands-on LabsRegularly practicing offensive and defensive security concepts through TryHackMe's practical lab environments. Focus areas include Active Directory, Privilege Escalation, and SOC methodologies.
Notable Completed Rooms:
-
Attacktive Directory (Medium)
Exploiting vulnerable Domain Controllers -
Windows & Linux PrivEsc Arena (Medium)
Privilege escalation techniques -
RazorBlack (Medium)
Advanced Active Directory exploitation -
Monitoring Active Directory (Medium)
Defensive AD log analysis -
Security Analyst Pathways (Easy)
SOC, Defensive/Offensive Intros
Interactive Terminal
Welcome to the interactive terminal. Type 'help' or click a command below.
My Photography
A passion for capturing moments and visual storytelling through my lens.
