
Pratik Shetty
cyber
Researcher
About
Cybersecurity Analyst with over 4 years' experience specialising in red teaming, application security, and mobile app testing. Proven track record in identifying critical vulnerabilities and improving security postures for manufacturing and financial clients using tools like Burp Suite and Metasploit. Certified in MCRTA, CRTO, CRTP, eCPPTv2, and CEH, with recognised bug bounty achievements and CVE publications demonstrating a commitment to proactive security research. Currently pursuing an MSc in Cyber Security at the University of York (UK) and residing in the UK on a Student Visa, with eligibility to work Internships and Full-time upon course completion.
Experience
- -
Consultant @ Ernst & Young
Mumbai, India - On-siteSummary:
- Led comprehensive security assessments for manufacturing clients, specializing in web/mobile application security, internal red teaming, and network vulnerability assessments.
Responsibilities:
- Led over 15+ security assessments for manufacturing clients, covering web/mobile apps, internal red teaming, and Wi-Fi testing, improving overall security posture.
- Prepared precise vulnerability reports and Proof-of-Concepts (POCs) for over 40 projects, helping clients fix security issues and secure their systems.
- Conducted targeted training for client teams on Burp Suite and red teaming, increasing internal security knowledge by 30% for 50+ participants.
- Performed network vulnerability assessments on 15+ client environments, identifying critical risks and guiding patching efforts to strengthen defenses.
- Regularly audited firewall, switch, EDR, and Zscaler settings for 5+ enterprise clients, ensuring 100% compliance with security policies and standards.
- Collaborated with 5+ IT teams to integrate firewall solutions into the overall network architecture.
- Burp Suite
- Metasploit
- Red Teaming
- Wi-Fi Security
- Network Security
- Vulnerability Assessment
- EDR
- Zscaler
- Firewall
- -
Associate Consultant @ Aujas Cybersecurity
Mumbai, India - On-siteSummary:
- Performed extensive web application and API penetration testing for major financial clients, with focus on vulnerability identification and remediation guidance.
Responsibilities:
- Performed 50+ web applications and API penetration tests for a major financial client, identifying critical vulnerabilities in key systems.
- Created detailed Proof-of-Concepts (POCs) and vulnerability reports for 10+ projects, helping clients understand and fix security weaknesses.
- Led Wi-Fi security assessments, uncovering network weaknesses and providing actionable recommendations to strengthen wireless defenses quickly.
- Worked closely with clients to discuss and resolve identified vulnerabilities, speeding up the fix process by an average of 15-20%.
- Web Application Security
- API Security
- Penetration Testing
- Vulnerability Assessment
- Wi-Fi Security
- Financial Services
- POC Development
- Client Relations
Skills
- Windows
- Linux
- Kali Linux
- Parrot OS
- Windows Server
- Python
- Solidity
- Rust
- Web Application Security
- Mobile Application Security
- API Security
- Active Directory
- Wi-Fi Security
- Firewall
- Network Devices
- EDR
- Burp Suite
- Nessus
- Postman
- MobSF
- Frida
- Objection
- SQLMap
- Metasploit
- Wireshark
- Zscaler
- OWASP
- NIST
- MITRE
Education
University of York
CybersecurityMumbai University
Business Management Studies - Finance
Certificates
MultiCloud Red Team Analyst [MCRTA]
CyberWareFare LabsCertified Red Team Operator [CRTO]
Zero Point SecurityCertified Red Team Professional [CRTP]
Altered SecurityCertified Ethical Hacker [CEH]
EC-CouncileLearnSecurity Junior Penetration Tester [eJPT]
INE Security
Bug Bounty
Honorable Mentions
- Google
Honorable mention for security research
Hall of Fame
- Microsoft
3 times Hall of Fame recognition
- University of York
Hall of Fame (January 2026)
- Oracle
Hall of Fame (October 2022)
HackerOne
- Adobe
Vulnerability disclosure
- Cosmos
Security research contribution
- CrowdStrike
Vulnerability disclosure
- Sony
Security research contribution
Appreciation Letters
- AWS Security
Security research appreciation
- Salesforce
Vulnerability disclosure appreciation
- Apache
Security research contribution
- NVIDIA
Security research appreciation
- Palo Alto
Security research contribution
- TV3 Group
Vulnerability disclosure appreciation
- FileCoin
Security research contribution
- Red Hat
Security research appreciation
Other Platforms
- Intigriti - Here Technologies
Vulnerability disclosure
- Bugcrowd - NASA
Security research contribution
- Immunefi - Moonbeam
Smart contract security research
- Immunefi - Nodle
Blockchain security research
Published CVE
Eclipse Foundation
CVE-2022-36022
Security vulnerability in Eclipse project
Open Source Projects
CVE-2022-3492, 3493, 3502, 42235, 42236, 42237, 42238, 42991, 42992, 42993
Multiple security vulnerabilities discovered in open source projectsCVE-2023-3987, 3986
Security vulnerabilities in open source projects
Speaker
Cybersecurity Trends and Future Roadmap
Cybersecurity 2024: Mapping the Road AheadPune, IndiaPresented insights on emerging cybersecurity threats and industry trendsSmart Contract Auditing
Smart Contract Security ConferencePune, IndiaTechnical presentation on smart contract security assessment methodologies