Prabhsimran Singh ⚛️

DevOps Engineer

London, United Kingdom5 yrs experience

Key Highlights

Specializes in product security and ethical hacking.
Extensive experience in penetration testing and incident response.
Proven track record in vulnerability management and security consulting.

Stackforce AI infers this person is a Cybersecurity Consultant with expertise in product security and incident response.

Contact

Skills

Core Skills

Penetration TestingCybersecurity Incident ResponseSecurity ConsultingInformation Security ConsultingSecurity ImplementationVulnerability AssessmentCloud Security

Other Skills

ARPAcunetixAmazon Web Services (AWS)Burp SuiteCC (Programming Language)C++Critical Incident ResponseDomain Name System (DNS)Emerging TrendsHoneypotsHuntingIDSIP AddressingIPS

About

Hello, thanks for visiting. He is a Cybersecurity Consultant specializing in product security with a robust background in ethical hacking. Feel free to reach out to him if you share his passion or have any questions.

Experience

5 yrs

Total Experience

1 yr

Average Tenure

1 yr 1 mo

Current Experience

Bdo uk llp

Senior Offensive Security Analyst

May 2025 – Present · 1 yr 1 mo · Remote

Security ConsultingInformation Security ConsultingPenetration TestingCybersecurity Incident ResponseCritical Incident ResponseSecurity Incident Response+1

Goaco

Cyber Security Consultant

Aug 2024 – Apr 2025 · 8 mos · Northfleet, England, United Kingdom

Linux System AdministrationSecurity ConsultingInformation Security ConsultingIT Consulting

Finelabs.co

Senior Security Engineer

Sep 2023 – Jul 2024 · 10 mos · Remote

Threat and Vulnerability Management
Assume Breach Penetration Testing
SecOps

Security ImplementationNetwork Security ImplementationVulnerability AssessmentDomain Name System (DNS)Linux System AdministrationVulnerability Management+2

Oportun

Associate Security Engineer

Jul 2022 – Jun 2023 · 11 mos · Remote

Roles and Responsibilities:
Identifying relevant APT groups targeting Fintech organizations.
Extracting TTPs from threat intel reports.
Planning and documenting a phase of the red team.
Comparing Command & Control frameworks.
Automations(Powershell/Bash/batch/python) and integrations wherever required.
Solving and presenting Cloud CTFs(Cloudgoat, GCPGoat, AWSGoat).
Interviewing candidates for offensive security.
Network, Web, and API Pentesting.
Report Writing

Cloud SecurityInfrastructureKnowledge SharingLinux System AdministrationEmerging TrendsAmazon Web Services (AWS)+3

Ibm

Penetration Tester

Jan 2021 – Jun 2022 · 1 yr 5 mos · Remote

Roles and Responsibilities:
Container Testing (Kubernetes, Openshift, docker, podman): RBAC policies, Container breakouts ,Seccomp , Apparmor, SELinux ,namespaces, cgroups etc.
Network Infrastructure (Subnets/IP addresses): Open TCP ports, Open UDP ports, Host discovery, Banner grabbing, Service version Enumeration.
System level Testing: Linux/Windows Privilege escalation, identifying old vulnerable software
Tooling and automation for container testing(https://github.com/pswalia2u/Pentest_automation_scripts)
Automation AD deployment(Devops)- Hashicorp's terraform, vagrant and packer(https://pswalia2u.medium.com/automate-active-directory-installation-packer-provisioning-vagrant-e5b059d8fda)
Guiding/helping team members to prepare for OSCP, CRTP, eCPPT exams.

Cloud SecurityInfrastructureKnowledge SharingLinux System AdministrationEmerging TrendsAcunetix+3

Synack red team

Synack Red Team Researcher

Dec 2020 – Aug 2024 · 3 yrs 8 mos · Remote

Pyramid cyber security & forensic

Security Analyst L1

Apr 2020 – Jan 2021 · 9 mos · Remote

Roles and Responsibilities:
Web Application pentesting-OWASP top 10(injection attacks, privilege escalation, file upload bypass), No rate limiting etc.
API pentesting- UUID (randomness), IDORs, HTTP methods, privilege escalation, jwt tokens, sensitive info, stack traces etc.
Network pentesting- Public/Private IPs (VPN access), Open TCP ports, Open UDP ports, Host discovery, Banner grabbing, Service version Enumeration.
Tunneling/portforwarding(chisel,SSH,socat,Metasploit )
Converting Metasploit post modules from ruby to powershell (https://github.com/pswalia2u/metasploit_windows_gather)

InfrastructureLinux System AdministrationEmerging TrendsAcunetixSecurity ConsultingInformation Security Consulting+1