Hi, I'm Raj Kumar!

Pentester & Red Teamer

>_

abt-me

Who am i

Pentester | Security Consultant | Instructor

I work in offensive security across Web, API, Network (Internal/External) and cloud environments, focusing on identifying and exploiting real-world vulnerabilities. My work includes penetration testing, security consulting, and building hands-on learning experiences as an instructor and CTF creator. I approach systems from an attacker’s perspective finding entry points, escalating access, and understanding how security controls fail in practice. My focus is always on practical impact, not just theoretical issues.

Over time, I have worked on diverse environments ranging from modern web applications to internal infrastructures, continuously adapting to different security challenges. I am particularly interested in understanding how small weaknesses can be leveraged into meaningful impact through chaining and post-exploitation. Alongside hands-on testing, I actively contribute to learning and knowledge sharing by creating practical content and challenges that reflect real-world scenarios.

Focused on real-world impact, not just theoretical findings.

Students Trained
0 K+
Labs Created
0
CTFs Organized Alone
0
Workshops Given
0
Vulnerabilities Reported
0 +

Experience & Community Contributions

Security Researcher & Course Contributor

Hackersdaddy Cybersecurity Solutions (Internship + Community)

2020 – Present

- Performed and led penetration testing activities across web applications, APIs, and network environments

- Contributed as a Course Author, Lab Developer, and Exam Designer for cybersecurity certification programs (CPPT, JWPT)

- Contributed to building practical cybersecurity training programs used by 5K+ learners

- Designed and built hands-on labs simulating real-world web, API, and network attack scenarios

- Coordinated with team members and contributed to structured vulnerability reporting and remediation guidance

- Actively involved in community-driven security research, CTFs, and knowledge sharing

Penetration Tester

Cipher Legion Pvt. Ltd. (Contract – USA Client)

Jan 17 2026 – Jan 31 2026

- Performed Source Code Analysis (SCA) and GraphQL API pentesting

- Identified vulnerabilities, validated exploitation, and analyzed real-world impact

- Worked on secure code review and risk-based remediation aligned with industry standards

- Collaborated with the pentesting team to deliver technical findings within project timelines

Brand Ambassador & Community Contributor

APIsec University (Part-time)

July 2025 – Present

- Participated in API security CTFs and real-world challenges

- Built and shared vulnerable labs for hands-on learning

- Contributed writeups and collaborated with the community

- Organized and supported security workshops and events

Certifications

Certified Ethical Hacker (CEH)

EC-Council

API Security Certified Professional

APIsec University

Certified API Security Analyst

APIsec University

Certified AppSec Pentester (CAPen)

The SecOps Group

My Skills

Technical Skills

Pentesting 100%
Cloud Security 85%
Red Teaming 80%
Programming 70%
Labs Creation 90%

Soft Skills

Problem Solving 100%
Critical Thinking 95%
Mentoring 100%
Continuous Learning 80%
Adaptability 90%

Available For Security Engagements

Focused on real-world impact, not just reports.

Security Testing & Training Services

Providing comprehensive penetration testing across Web, API, Network (Internal & External), and Cloud environments. I also deliver hands-on security training focused on real-world attack scenarios and practical exploitation techniques.