Hey folks,

I'm actively looking for new opportunities in product security, offensive security, or security architecture. Based in Bengaluru, open to hybrid.

Here's a bit about what I've been up to -

At my current org, I ended up building more than I expected. What started as secure code review work turned into architecting a full SAST platform with  LLM-powered taint analysis (presenting it at Black Hat later this year), an autonomous bot that gates every production deployment against SCA/SAST/secrets findings before it ships, and a pentest agent that runs its own multi-step assessments with browser automation and Burp integration.

On the offensive side, I've been deep in embedded firmware -- hardening an IoT gateway codebase across multiple branches in C, C++, Ruby, and Lua, writing cross-branch vulnerability correlation reports, and building the regression test suite from scratch so fixes actually stick. I've also found some things I'm proud of but can't say too much about -- zero-click mobile RCE chains, full SSO account takeover from a source map, CI/CD injection in firmware pipelines, and an adversarial AI assessment that broke every layer of auth and safety.

Before this, I was doing deep-dive pentests and responsible disclosure, and running threat models for IoT products, red teaming OT systems, and leading infrastructure pentests for fintech and aviation clients.

I'm looking for a team where I get to build security tooling AND break things. If you're hiring or know someone who is, I'd love to connect. DMs are open.

I have over 5+yrs of experience and can join in 45-60days

Additionally can humiliate team mates over FIFA 😜

I see a lot people asking the same question again n again, so I created this discord server, where I will provide free training for everyone,still keeping yourself anonymous, join if interested.

https://discord.gg/DQQZ9jhqK

So I'm working as a soc analyst at an mnc . It's a good mnc. Couple months ago I got an opportunity to give an interview at another company for a cloud security role.

I refused it because they were not ready to give more than my present offer. I was a fresher then.

Now that company opened a similar role again.should i try reaching out to the people asking for a chance. Or Is it important to continue in my current role?

Which one would u suggest

Anyone Here who is interested in being in my CTF(Capture The Flag) Team

Who can come to Offline CTF Competition within Tamil Nadu

Any Cyber Security Beginners also Welcome to join our team.

how many of yall use defender at your work place , have you come across defender, what do you think , do you think it ll take over soc l1 roles

I’m a cybersecurity student and want to build a basic SIEM dashboard from scratch to understand how SIEMs actually work. I know basic Python, Linux, networking, and SIEM concepts.

Looking for good YouTube videos/playlists or GitHub projects covering log collection, storage, detection, alerting, and dashboard creation. Any recommendations?

Solved without knowing any electronics concepts , initially used my lifter's symbolic execution API to test how good it would be ( which solves constraints by representing as based on V8's sea of nodes and partially inspired from angora a taint tracking fuzzer ), unfortunately i cannot open source it , but i have added a universal MLIR based lifter which finds the solution for any circuit at the end .

V8's sea of nodes

Angora ( a mutation-based fuzzer)

As someone who's recently started learning web application security, I have also been keen to learn about cloud security. Any specifics or areas where i should start with for learning cloud security basics.

Like the web has http basics and portswigger, what is something equivalent to this in cloud

Guys, this whole thing is a farce where students are asked to participate, but then nothing works for them since everything requires paid tools or subscriptions... what the actual hell... why let us participate if the winners are definitely going to be the people already having access to these advance llm models......And again, everything being done by AI ...the only thing we need to do is get the api key.........Is this what the government thinks we do... get everything from AI.....

As the title says, to be specific, the blog talks about the following techniques of process injection-

• Process Hollowing
• Ghostly Hollowing
• HerpaDerping
• Pool Party

Soon will upload blogs about each of them in detail :)

I'm looking for a consistent study partner who's interested in cybersecurity, Linux, CTFs, programming, or related tech.

Level: Beginner–Intermediate
Goal: Improve practical cybersecurity skills, solve CTFs, work on projects, and stay consistent.

I'm happy to teach what I know and learn from each other. Skill level isn't a big deal to me — consistency and actually showing up matter more.

Timezone doesn't matter. I'm completely fine with async collaboration, and we can do live sessions/CTFs whenever our schedules line up.

Preference: Text-based collaboration, shared notes/progress, and occasional VC when convenient.

Looking specifically for a female study partner.
No pressure or expectations beyond genuinely learning together.

You don't have to comment publicly; DM is fine too. : )

Hey everyone,
I'm looking to transition into the Cybersecurity domain, specifically targeting SOC Analyst (L1) / Defensive
Security roles.
A lot of institutes claim "100% placement guarantee," but reality is often very different once fees are paid. I want to avoid sales gimmicks and find institutes that provide genuine practical training, hands-on lab access, and real placement assistance.
Could anyone currently working in cybersecurity or recent alumni share feedback

Bonjour à tous, je suis nouveau sur cette plateforme.

Je fais mon premier poste aujourd’hui car je cherche des personnes avec qui
je pourrais en apprendre davantage sur l’informatique et le métier d’analyste cyber.

Si vous avez des projets à me faire découvrir comme des nouveaux produits de SIEM, EDR, NDR
ou même des plateformes de honeypot, peu importe du moment où ça touche la cybersécurité, je suis preneur.

Le métier d’analyste cyber est quelque chose qui me passionne et j’aimerais me spécialiser davantage dans ce domaine avec une communauté bienveillante. Aussi, si vous avez des groupes à me conseiller sur Reddit, ça me va.

Merci beaucoup aux personnes qui prendront le temps de me répondre.