Principal-Led
Cybersecurity &
Secured Architecture.
Independent Security Researcher & Technical Director helping organizations identify critical vulnerabilities and harden cloud & web perimeters before threat actors exploit them.
Security Profile & Architecture
As a cybersecurity specialist and penetration tester, I combine deep technical expertise in offensive vulnerability discovery with a holistic understanding of enterprise threat surfaces. I specialize in identifying system flaws, simulating advanced threats, and engineering bulletproof defensive architectures.
Beyond consulting, I serve as Branch Head at CBCE HABRA, directing authorized computer education programs and training hundreds of students in Web Application Security, CCA, and modern development, helping organizations identify critical vulnerabilities and harden cloud & web perimeters before threat actors exploit them.
Is Your Website Bleeding Mobile Visitors?
Over 50% of mobile users leave a website that takes longer than 3 seconds to load. We conduct a thorough, human-verified technical diagnostic covering mobile Core Web Vitals (FCP/LCP), script chokepoints, SEO meta structure, and accessibility contrast flags.
- Real Mobile Benchmarks: Throttled cellular emulation on mid-tier mobile viewports.
- Bottleneck Breakdown: Clear detection of uncompressed images, heavy fonts & blocking scripts.
- Zero Automated Spam: 1-page executive brief with 3 priority fixes delivered in 24 hours.
Enterprise Security & Architecture Services
Principal-led OWASP vulnerability assessments, rapid incident triage, and secured web architecture.
Website Speed, Core Web Vitals & SEO Overhaul
- 90+ Mobile PageSpeed score guarantee (FCP < 1.8s, LCP < 2.5s)
- Elimination of render-blocking JavaScript & CSS bottlenecks
- Responsive WebP image compression & aspect-ratio CLS fixes
- Webfont & icon deferral with font-display: swap
- Technical SEO schema JSON-LD, OpenGraph & meta fixes
- WCAG 4.5:1 Accessibility contrast & landmark compliance
- Verified Before & After performance scorecard delivered
Startup & SME Website Security Audit (OWASP VAPT)
- 72-hour manual + automated OWASP Top 10 assessment
- SQLi, XSS, CSRF, auth flaws, and logic bypass testing
- Sensitive .env, .git, and backup file discovery
- Executive Risk Scorecard & C-Level brief
- Developer-ready remediation PDF with code fixes
- Free 15-day post-fix re-test verification
Urgent Hacked Website & Malware Rescue
- 24-hour emergency malware triage and cleanup
- Complete PHP/JS web shell and backdoor removal
- Google Safe Browsing / McAfee blacklist de-listing
- Database sanitization & defacement recovery
- Web Application Firewall (WAF) lockdown
Creator & Executive Account Hardening
- 1-on-1 live session locking down YouTube & business accounts
- Google Workspace & business domain security audit
- Hardware key (FIDO2/YubiKey) & TOTP authenticator setup
- DMARC, DKIM, and SPF email spoofing defense
- Anti-session hijacking & browser cookie shields
Business Launchpad Website (Built + Branded + Secured)
- Custom 5-page ultra-fast responsive architecture
- Tailored brand palette, graphics, typography & identity
- High-conversion technical SEO & OpenGraph setup
- SSL, HSTS, and strict CSP security header hardening
- Interactive contact form with anti-spam honeypots
- Official "Protected by SM SECURE" Trust Seal
Custom Web App / Portal / Flutter Development
- Full-stack web portals, ERP, booking systems or Flutter apps
- Engineered with zero-trust role-based access control (RBAC)
- Serverless cryptographic tokens & authenticated APIs
- Rigorous pre-delivery vulnerability audit included
- Kickoff deposit deducted 100% from total custom scope
Annual AMC & Website Security Shield
- Monthly automated + manual perimeter security scans
- Daily offsite encrypted backups of code and database
- 24/7 uptime monitoring & instant downtime alerts
- Core CMS, plugin & security updates applied safely
- Dedicated priority technical support for fixes
Technical Case Studies
In-depth technical write-ups detailing challenges, engagement scope, vulnerability reproduction, business impact, and remediation steps.
Enterprise Penetration Assessment
Simulated lateral movement and privilege escalation across a multi-domain Active Directory forest, uncovering 3 high-severity Domain Admin escalation vectors.
Automated Perimeter Scanner
Engineered an asynchronous multi-threaded port auditor and network banner analyzer that cross-references live service banners against active CVE databases.
E-Commerce Security Hardening
Eliminated client-side payment tampering vulnerabilities, secured checkout callback state handling, and deployed strict Content Security Policies.
Credential & Team ID Verification
Cryptographically verified directory of official certificates, squad residency members, and studio accreditations.
Operations Log & Experience
Preserved career timeline spanning technical leadership, cybersecurity instruction, and infrastructure operations.
Branch Head
CBCE HABRASupervising authorized computer training, managing local network infrastructure audits, overseeing cybersecurity educational programs, and delivering technical curriculum across West Bengal.
Manager (Technical Operations)
M Interior | Design StudioDirecting operational logistics and network deployment for modular manufacturing systems, overseeing internal infrastructure security, IT assets, and ERP systems.
Cyber Security Mentor
SuperprofDelivered structured security lectures, mentoring students worldwide in secure coding, Linux networking, Burp Suite, Web App Pentesting, and ethical hacking roadmaps.
Teaching Faculty
Central Board of Computer Saksharta MissionLectured Web Application Security (Level 1 & 2), covering CCA, DCA, and core defensive programming strategies to hundreds of aspiring technicians.
Junior Security Tester
Docktape TechnologiesConducted contract-based vulnerability assessments, automated perimeter mapping, and internal threat classification under senior penetration testing engineers.
Internship Trainee
HCL TechnologiesAssisted senior engineers with network auditing protocols, threat classification, log analysis, and secure operating system imaging.
Industry Accreditations
Verified senior accreditations from ISC2, Cisco Networking Academy, OPSWAT Academy, and EC-Council CodeRed.
CC Domain 1: Security Principles
ISC2 Oct 2025 - Oct 2028 ID: b526dda8-0743-43ed-8554-cb1bf32c0bd6Cisco Certified Ethical Hacker (CCE-H)
Cisco Networking Academy Sep 2025 CCE-H CredentialICIP | Critical Infrastructure Protection
OPSWAT Academy Sep 2025 CIP Specialist PathOCFA | Cybersecurity Fundamentals
OPSWAT Academy Apr 2024 OCFA AssociateSQL Injection Attacks & Mitigation
CodeRed (EC-Council) Aug 2025 ID: 427078Android Application Security & Bug Bounty
CodeRed (EC-Council) Aug 2025 ID: 428720Request Scope Assessment & Consultation
Submit application parameters, infrastructure specifications, or technical advisory inquiries directly to our desk.
Securing Your Digital Infrastructure
Ready to evaluate your organization's perimeter or discuss an upcoming penetration test? Tell us about your application stack and timeline requirements.