tushar k a n t i d h a r .
Tushar's self portrait

Hi, I'm Tushar.

  • Cybersecurity Researcher. Cloud Practitioner.
Download Résumé

Experiences

Linux System Administration Intern · LinuxWorld Informatics Pvt Ltd

June 2023 - July 2023

Throughout my internship at LinuxWorld Informatics, I actively engaged in practical exercises, troubleshooting scenarios, and real-world projects, providing me with valuable hands-on experience and a strong foundation in Linux system administration using Redhat Enterprise Linux and AWS EC2 service.
  • SSH Protocol, Putty, and DNS configuration.
  • RPM package management and kernel understanding.
  • Remote Login, network interfaces, and basics of networking.
  • Apache HTTPD webserver and SELinux implementation.
  • NMAP Command, logs, and various login methods.
  • Encryption, key-based authentication, and user management.
  • Password security, system level commands, and firewall setup.
  • Firewalld service, zones, and port forwarding.
  • Resetting root password, containerisation with Podman, and Cockpit for server management.
See Other Experiences

Licenses & Certifications

Certified in Cybersecurity CC

ISC2 Certified in Cybersecurity (CC)

December 2022 - ISC2

The Certified in Cybersecurity certification validates my expertise in cybersecurity, enabling me to safeguard digital assets, mitigate risks, and protect against evolving cyber threats.
  • Advanced cybersecurity concepts and practices.
  • Security principles, risk management, and mitigation strategies.
  • Identifying and addressing cyber threats, vulnerabilities, and attacks.
  • Regulatory and compliance requirements in cybersecurity.
  • Access control, network security, and security operations.
Microsoft Security SC-900

Microsoft Certified: Security, Compliance and Identity Fundamentals (SC-900)

January 2023 - Microsoft

The SC-900 certification equips me with foundational knowledge in security, compliance, and identity concepts, enabling me to contribute to a secure, governed, and compliant cloud environment.
  • Security, compliance, and identity concepts in cloud environments.
  • Identity services, authentication, access management, and identity protection.
  • Implementing identity governance measures in Azure AD for enhanced security.
  • Security capabilities, security management in Azure, and threat protection with Microsoft 365 Defender.
  • Microsoft compliance solutions, managing compliance through the Service Trust Portal and utilizing Microsoft Purview for information protection and data lifecycle management.

Projects

Web Application Penetration Testing

March 2023 - April 2023

The objective of the project was to conduct a black box pentesting in the target web application to identify broken authentication vulnerabilities, which is one of the most common OWASP top 10 vulnerabilities.
  • The scope of the project was to assess the authentication mechanisms for weaknesses and potential unauthorized access.
  • Tools used: Nmap, Burp Suite, OSINT techniques, and custom scripts.
  • The finding included several vulnerabilities related to broken authentication like weak password policies, including lack of complexity requirements, allowing multiple attempts, and password reuse.
  • My team and I generated the pentest report with actionable recommendations to mitigate the identified risks, ensuring the client could implement necessary security measures to safeguard their application and protect highly confidential user data.

Volunteering

ISC2 Exam Developer Badge

Cybersecurity Exam Development Volunteer

April 2023 - ISC2

As a chosen subject matter expert by ISC2 for a 3-day exam development workshop, my role was to produce and review content for the upcoming Certified in Cybersecurity (CC) exam along with some highly proficient volunteers from around the world. With the help of several resources provided by ISC2, my responsibility was to ensure the quality and set the standards of the content developed by other subject matter experts and me during the 18-hour workshop.

Community Activities

CodeX Club · GITAM University

Cybersecurity Lead (August 2022 - Present)

CodeX is a student-run technical club at GITAM University. As cybersecurity lead, I manage projects related to the club's initiatives and objectives. I also:
  • Supervised multiple projects as the project manager.
  • Facilitate technical skill development and cybersecurity education for GITAM University students.
  • Conduct workshops, bootcamps, events, and development sessions to enhance technical expertise.
See Other Activities

Academic Education

Graduation · Bachelor's of Computer Applications

2021 to 2024 · Gandhi Institute of Technology and Management, Bengaluru, India

Currently pursuing a Bachelor of Computer Science degree at GITAM University, I'm gaining a solid foundation in computer science and software essentials under the guidance of proficient professors. The curriculum covers diverse areas such as programming languages (Python, C++, JavaScript, Java, R, PHP), information technology, data science, operating systems, web technologies, data structures, networking, Unix programming, and more. Additionally,
  • I received the SII scholarship to pursue my undergraduate degree in India.
  • Besides the core subjects mentioned above, I am encouraged to learn and engage with soft skills, club activities, venture development, sports, and many more.

Higher Secondary School · Science

Bangladesh Air Force Shaheen College, Chittagong, Bangladesh

Studied science subjects including Information Technology, Physics, Mathematics, Biology, and Chemistry.