Vraj Shah

Adept at blending analytical thinking with relationship-building skills, I significantly enhanced market penetration for AT&T through targeted campaigns and a high-performing sales team.

My background in cybersecurity, including risk assessment and incident response at ASD, complements my proficiency in Python, ensuring a well-rounded approach to both technical challenges and customer engagement.

Professional cybersecurity specialist skilled in threat analysis, network security, and incident response. Strong focus on team collaboration and achieving results, adapting to changing needs seamlessly.

Known for robust problem-solving abilities, strategic thinking, and effective communication. Expertise includes risk management, vulnerability assessments, and regulatory compliance.

• Developed a Python script to automatically parse and analyze logs from SIEM tools (e.g., Splunk, ELK, Graylog), reducing manual analysis time by 70%.
• Implemented regular expressions (regex) and pandas to identify anomalous patterns in logs.

• Created a threat intelligence feed aggregator that collects data from sources like VirusTotal, AlienVault OTX, and Shodan API to identify and block malicious IPs and domains.
• Automated integration with firewalls and IDS/IPS to update blacklists dynamically.

• Developed a custom vulnerability scanner using Python libraries like Nmap, OpenVAS API, or Shodan, identifying unpatched systems in the network.
• Automated CVE tracking and patch deployment using Python scripts and integrations with NIST's National Vulnerability Database (NVD) API.

• Built a Python-based incident response playbook that automates malware analysis, forensics, and alert triaging.
• Implemented an email phishing analysis tool to extract IoCs (Indicators of Compromise) from emails, helping SOC teams respond 40% faster.

• Developed a real-time packet sniffer using Scapy and PyShark to detect anomalies and flag suspicious traffic.
• Integrated with Zeek (Bro IDS) and Suricata to enrich network logs with threat intelligence.

• Created a password strength auditing tool using Python to check for weak passwords in Active Directory.
• Implemented hash cracking automation with Hashcat and John the Ripper API to test password security policies.

• Built a machine learning-based malware classifier using Python libraries like Scikit-learn, TensorFlow, and YARA to detect malicious files based on behavior.
• Automated sandbox analysis of suspicious executables using Cuckoo Sandbox.

• Developed an automated web vulnerability scanner using BeautifulSoup, Selenium, and OWASP ZAP API to detect SQL injection, XSS, and CSRF.
• Integrated the tool into CI/CD pipelines to enforce security testing.

• Wrote Python scripts to audit AWS IAM policies and detect overly permissive S3 buckets using Boto3.
• Automated Azure security monitoring to check for misconfigurations and enforce best practices.

• Developed a Python-based phishing simulation tool to test employees' cybersecurity awareness.
• Automated compliance reporting (e.g., NIST, ISO 27001, SOC2) by collecting and formatting security logs into predefined templates.