Hiren Tank
SOC Analyst with hands-on experience in SOC operations, Vulnerability Assessment and Penetration Testing (VAPT), threat hunting, and incident response. Skilled in building real-world security labs including Wazuh SIEM, Snort NIDS, and custom vulnerability scanning tools. Completed professional cybersecurity internship performing threat analysis, log analysis, alert triage, and tool-based security assessments.
Holds industry-recognised certifications (CISEH, EHE, Try Hack Me). Proficient in OWASP Top 10, network security monitoring, CVE analysis, and CVSS scoring. Seeking to contribute as a Cybersecurity Executive / SOC Analyst in a security-focused organisation.
Experience
Intern
DG Intern Hub
Ahmedabad, Gujarat
Gained hands-on, practical exposure to core cybersecurity concepts and frameworks. Applied theoretical security knowledge within a structured corporate environment. Maintained strict adherence to organizational guidelines and professional protocols.
Cybersecurity Intern
Demmisto Technologies
Conducted web application vulnerability assessments (VAPT) using Burp Suite and OWASP ZAP, identifying and documenting 10+ critical and high-severity vulnerabilities including SQLi, XSS, and security misconfigurations. Performed network reconnaissance, port scanning, and enumeration using Nmap to map attack surfaces, identify open services, and assess exposure to known CVEs. Carried out log analysis and alert triage on security events, assisting SOC L 1 analysts in threat detection, incident identification, and escalation workflows. Prepared detailed vulnerability assessment reports with CVSS severity ratings, risk impact analysis, and actionable remediation recommendations for client review. Executed controlled penetration testing exercises using Metasploit, Wireshark, and Hydra in isolated lab environments to simulate real-world attack scenarios.
Cybersecurity Workshop — Technical Volunteer
Gujarat University
Ahmedabad
Delivered hands-on technical sessions on network security, ethical hacking, and threat analysis fundamentals to 50+ attendees. Coordinated lab environment setup for practical exercises covering penetration testing and vulnerability assessment workflows.
Education
Gandhinagar Institute of Technology (GIT)
B. in Cyber Security
Pursuing. Core subjects: Network Security, Web Application Security, Ethical Hacking, SOC Operations, SIEM, Cryptography, Digital Forensics, Incident Response, Linux Administration, Penetration Testing.
Silver Oak University
Diploma
Graduated
Skills
SOC OperationsThreat Hunting & Threat DetectionSIEMWazuhFIMcustom rulesIDS/IPSSnortrule writingtraffic monitoringWeb Application SecurityOWASP Top 10SQLiXSSTCP/IPOSI ModelVulnerability Documentation & Report WritingPythonscriptingautomationsecurity toolingLinux CLI
Languages
English
Working Proficiency
Hindi
Full Professional
Gujarati
Native Professional
Projects
Wazuh SIEM Home Lab — SOC & Blue Team Operations
Deployed a production-style Wazuh SIEM environment with centralised log ingestion from multiple endpoints. Configured real-time File Integrity Monitoring (FIM), custom detection rules, and alert correlation workflows aligned with SOC L 1 incident response procedures. Simulated threat detection and triage scenarios to build hands-on SOC analyst experience.
Network Intrusion Detection System (NIDS) — Snort IDS/IPS
Installed and configured Snort IDS in a virtualised lab to perform real-time network traffic monitoring and threat detection. Authored and tuned custom Snort rules to detect port scans, brute-force login attempts, and malicious payloads. Analysed triggered alerts and produced structured threat reports with risk classification and remediation guidance.
Network Scanning & Enumeration Lab — Reconnaissance & VAPT
Designed an isolated lab network and executed full-scope Nmap scans (SYN scan, OS detection, version enumeration) to identify open ports, running services, and potential attack vectors. Cross-referenced findings against CVE databases with CVSS scoring for prioritised vulnerability remediation. Documented results in a professional penetration test-style report.
Python Security Automation — Password Generator & Strength Analyser
Developed a CLI-based cryptographically secure password generator using Python's secrets module with configurable length, character sets, and entropy estimation via raggares. Extended the tool with an automated password strength analyser providing actionable security feedback, demonstrating scripting and security automation skills.
Certificates
CISEH — Certified Information Security and Ethical Hacker
Cyber Security 101 — Try Hack Me
Covers information security principles, ethical hacking methodologies, network security, and penetration testing fundamentals.
EHE — Ethical Hacking Essentials (EC-Council)
EC-Council certified: reconnaissance, scanning, enumeration, exploitation, vulnerability assessment, and reporting.
Network Analysis — Blue Team
Network defence, packet analysis, traffic monitoring, anomaly detection, and IDS/IPS operations.
Foundational cybersecurity path
Try Hack Me
Offensive security, defensive operations, networking, and web security.
Pre-Security Path
Try Hack Me
Structured learning path: networking, Linux administration, web fundamentals, and security basics.
Advent of Cyber 2024
Try Hack Me
Completed annual Try Hack Me Advent of Cyber 2024 — 24-day offensive and defensive security challenge series.