Rojan Shrestha | Cybersecurity Professional

About Me

Cybersecurity undergraduate with 11+ months of internship experience in Offensive Security and Vulnerability Assessment and Penetration Testing (VAPT).

Uncovered 30+ vulnerabilities across 8+ web applications, reducing open security issues by 40% through CVSS-rated reporting and remediation re-testing.

Proficient in Burp Suite, Nmap, SQLmap, Metasploit, OWASP ZAP, Wazuh/OSSEC SIEM, and Kali Linux.

📧 shrestharojan025@gmail.com 📞 +977 9803845800 📍 Chapagaun, Lalitpur, Nepal

🛠️ Technical Skills

Burp Suite OWASP ZAP Nmap SQLmap Metasploit Kali Linux Wireshark Wazuh/OSSEC CVSS Scoring Python Bash Git AWS Cloud SIEM

💼 Experience

Quality Assurance & VAPT Intern

Xelvian Solutions Pvt. Ltd.

Jan 2026 - April 2026

Identified 10+ security weaknesses across 3+ web modules through manual and automated testing.
Reduced open security issues by ~40% via CVSS-rated documentation and remediation re-testing.
Integrated security compliance into QA cycles within a secure SDLC framework.

Offensive Security Intern

Cryptogen Nepal

Jun 2025 - Nov 2025

Uncovered 20+ critical vulnerabilities across 5+ web apps using Burp Suite, Nmap, SQLmap, OWASP ZAP, and Metasploit.
Identified OWASP Top 10 flaws including SQLi, XSS, CSRF, Command Injection, and Broken Authentication.
Authored 3+ pentest reports with CVSS ratings, PoC documentation, and remediation guidance.

🚀 Key Projects

Web Application VAPT — DVWA

Burp Suite · Nmap · SQLmap · Metasploit · Kali Linux

Exploited 8+ OWASP Top 10 vulnerabilities — SQL Injection, Reflected/Stored XSS, CSRF, Command Injection, File Inclusion, and Broken Authentication.
Tested across Low, Medium, and High DVWA security configurations with full PoC documentation.
Analyzed mitigation effectiveness and attack vectors mapping to defensive controls.

Wazuh & OSSEC SIEM Deployment

Wazuh · OSSEC · Ubuntu Linux · Kali Linux

Architected and deployed HIDS environment on Ubuntu Server integrating Wazuh and OSSEC across 2 monitored endpoints.
Configured File Integrity Monitoring (FIM), log collection pipelines, custom alerting, and event correlation rules.
Simulated adversarial activities (file modifications, privilege escalation) and investigated 15+ security events.

📜 Certifications

Ethical Hacker

Cisco Networking Academy · 2024

Certified Cybersecurity Educator Professional (CCEP)

RedTeamLeaders · 2025

AWS Cloud Practitioner Essentials

Amazon Web Services · 2023

Essentials of Security Policies & Procedures (ESSP)

Corp Security · 2024

Network Defense

Cisco Networking Academy

🏆 Achievements

🎯 2nd Place — CTF 2.0

IIMS-HACK@SEC 2025

💰 Internship

Money Mitra Network · Cyber Security

📘 Diploma in Computer Application

Fast Track · 2019

🎓 Education

Bachelor's in Computer Science (Hons) — Cyber Security Specialization

IIMS College / Taylor's University, Kathmandu

2023 - Present

CGPA: 3.70 / 4.00
Dean's List

🇳🇵 Rojan Shrestha