I am a Computer Science Engineering student specializing in Cybersecurity at SRM Institute of Science & Technology, Chennai (Expected Graduation: May 2028 | GPA: 9.52/10).

My engineering core focus is on the boundary where high-performance software engineering meets defensive security and vulnerability verification. I believe security must be architected into software at the design phase rather than added as a deployment patch. By studying low-level systems (such as raw NTFS disk structures, TCP socket routines, AST rule validators, and authorization boundaries), I build robust applications that are secure by design.

To understand my approach to code quality, software architecture, and security engineering, explore these master blueprints:

• HTTP Security Assessment Framework: My flagship 10-phase modular web security assessment engine built with Single Source of Truth architecture, Playwright browser verification, OWASP ZAP cross-validation, and 92.24% test coverage.
• IP-Sentinel Threat Platform: High-concurrency Go threat correlation engine built with Clean Architecture, parallel collection workers, Redis caching, and Next.js SOC dashboard.
• VulnReconX Recon Framework: Extensible security reconnaissance framework with YAML manifest plugin registry and SOLID boundary separation.
• DevOps & Actions Guide: Specifications for my automated testing, static analysis (Black, Ruff, MyPy, Bandit), dependency supply chain vulnerability scanning (pip-audit), and Docker build pipelines.
• Documentation & Blueprint Master: Architectural blueprints, execution flowcharts, API schemas, and network topologies for my projects.

My projects and academic study focus on the following domains:

• Digital Forensics & Incident Response (DFIR): Low-level file system structure analysis (NTFS metadata, $MFT records), file carving techniques, and scripting Wireshark/PCAP data extraction.
• Secure Web Architecture: Enforcing input boundary sanitization (using strict Zod schemas), mitigating OWASP Top 10 vulnerabilities, and securing API routers with stateless JWT signatures and database Row-Level Security (RLS).
• Network Diagnostics: Socket-level programming in Python/Go, banner-grabbing heuristics, and automating preflight routing verifications.
• Systems Hardening: Configuring isolated container runtimes with Docker multi-stage builds and applying least-privilege configurations to cloud identity systems (AWS IAM).

Python 3.12+ • Go (Golang) • C++ • TypeScript • JavaScript (ES6+) • Bash / Shell

Playwright • OWASP ZAP API • Reflected XSS Verification • NTFS Binary Parsing • PyYAML Plugin Engines • Wireshark / TShark • Nmap • Burp Suite • Socket Programming

Node.js • Express.js • PostgreSQL • Redis • Supabase • MongoDB • MySQL • SQLite

Docker & Compose • AWS (Foundational IAM) • Git & GitHub Actions • pytest-cov • Mypy / Ruff

• Released: HTTP Security Assessment Framework (v2.0.0) — Complete 10-phase production release with 92.24% test coverage and OWASP ZAP cross-validation.
• Building: Upgrading IP-Sentinel's parallel collection engine to support rate-limited threat intel providers.
• Learning: Deepening my understanding of Linux Kernel internals, virtual memory architectures, and container namespaces.
• Researching: Practical mitigation patterns for Server-Side Request Forgery (SSRF) in distributed microservice routing architectures.

If you are looking for an application security, cybersecurity, or software engineering intern, or want to collaborate on security projects:

• Email: kunjeyanhitesh13@gmail.com
• LinkedIn: linkedin.com/in/hiteshyadav6713
• GitHub: github.com/beast6713
• Resume: Resume.pdf | Resume.md

==================================================================================================
                 "Security is a process, not a product." — Bruce Schneier
==================================================================================================