Security Engineer · Pentester · Red Teamer

I break things professionally
so attackers can't

I'm Nash N Sulthan — a security engineer who has spent 8+ years finding the cracks before the bad guys do. From bypassing admin panels of fintech platforms to uncovering critical flaws in national e-voting systems, I specialize in turning "it's probably fine" into "it's actually secure."

I've helped build AI-powered vulnerability scanners, red-teamed high-profile targets, spoken on network security at ISRO's Vikram Sarabhai Space Centre, and organized CTF competitions that trained the next generation of hackers. When I'm not testing your defenses, I'm probably writing tools to automate the process.

GitHub LinkedIn X / Twitter WhatsApp Hire Me

What I Do

Penetration Testing & Vulnerability Assessment

Deep-dive security testing for web applications, APIs, mobile apps, servers, and network infrastructure. I go beyond automated scanners — manual exploitation, business logic flaws, and chained attack paths that tools miss. Aligned with OWASP Top 10, SANS, and PCI-DSS standards.

Red Teaming & Offensive Security

Adversary simulation that tests your detection and response, not just your perimeter. I've identified exposed internal endpoints from public-facing services, bypassed authentication on critical systems, and mapped attack paths that span multiple security boundaries.

Cloud Security & DevSecOps

Security architecture reviews and hardening for AWS, Azure, and GCP environments. Secure CI/CD pipeline design with GitHub Actions, Terraform-based infrastructure as code, Kubernetes security, and container hardening. SOC deployment using Wazuh, ELK, and CloudTrail integrations.

Security Tooling & Automation

Custom security tools in Python, Golang, and Bash. I've built AI-powered vulnerability scanners that reduced false positives significantly, fully automated out-of-band vulnerability testing frameworks, and dark web monitoring tools used by law enforcement.

Compliance & Secure Development

Implementation support for PCI-DSS, NIST 800-53, ISO 27001, and GDPR. Secure code review, threat modeling, security awareness training, and building a secure-by-design culture across engineering organizations.

Arsenal

Offensive Security
Penetration Testing Red Teaming Vulnerability Assessment Threat Modeling Secure Code Review Reverse Engineering Bug Bounty
Cloud & Infrastructure
AWS Azure GCP Kubernetes Docker Terraform GitHub Actions Wazuh SIEM
Languages
Python Golang Bash Java C/C++
Standards & Compliance
OWASP Top 10 PCI-DSS NIST 800-53 ISO 27001 GDPR OAuth2 SAML

Speaking

Track Record