Curriculum Vitae

Mallikharjun Swamy Sudnagunta — Cybersecurity Researcher, Infrastructure Engineer, Security Engineer

Mallikharjun Swamy Sudnagunta

Cybersecurity Researcher · Infrastructure Engineer · Security Engineer

Location

India

Professional Summary

Technology professional with extensive experience across Linux infrastructure, systems administration, security research, offensive security, automation and security engineering.

Core Skills

Security Specialties

Application SecurityAPI SecurityVulnerability ResearchOffensive SecuritySecurity AutomationLinux Infrastructure

Technical Skills

Linux Systems AdministrationNetworking & ProtocolsVirtualization (KVM, VMware, Docker)Web Servers (Nginx, Apache)Database Systems (MySQL, PostgreSQL)CI/CD PipelinesInfrastructure as CodeCloud Platforms (AWS, GCP basics)

Security Tools & Methodologies

Burp Suite ProfessionalFFUF / Gobuster / DirsearchNuclei / Nuclei TemplatesSQLMapOWASP ZAPCustom Python/Bash AutomationReconnaissance FrameworksAttack Surface MappingVulnerability ValidationThreat Modeling

Development & Tooling

PythonBash/Shell ScriptingGitDockerVS CodePostmanJira/ConfluenceMarkdown/Documentation

Cybersecurity Experience

Cybersecurity Researcher & Enterprise Penetration Tester

Bugcrowd · Freelance · Remote

Jan 2023 – Present

Gray-box penetration testing, web application vulnerability assessment, and enterprise security testing for Bugcrowd programs.

  • Gray-box penetration testing
  • Web application vulnerability assessment
  • Enterprise security testing
  • Vulnerability identification and validation
  • Technical documentation and remediation-oriented reporting
  • Use of Burp Suite, FFUF, Nuclei, and security automation tools
Burp SuiteFFUFNucleiPythonBashSecurity Automation

Offensive Security Engineer & Code Auditor

YesWeHack · Freelance · Remote

Jun 2022 – Present

API security testing, web application security testing, and authorized security research with strict Rules of Engagement.

  • API security testing
  • Web application security testing
  • Authorized security research under strict Rules of Engagement
  • Python and Shell automation for reconnaissance and scanning
  • Network reconnaissance and asset monitoring
  • Attack surface mapping and business logic vulnerability research
PythonBashAPI Security ToolsReconnaissance FrameworksCustom Scripts

Vulnerability Analyst & Security Consultant

HackerOne · Remote · Remote

Mar 2022 – Present

Security research, threat modeling, vulnerability validation, and technical vulnerability reporting with architectural remediation recommendations.

  • Security research and threat modeling
  • Vulnerability validation and technical reporting
  • Reproduction steps and technical impact analysis
  • Architectural remediation recommendations
Threat ModelingVulnerability AssessmentTechnical Writing

Infrastructure & Consulting Experience

Infrastructure & Web Development Consultant

Self-Employed · Freelance · India

Apr 2010 – Present

Client infrastructure management, WordPress infrastructure, dedicated hosting, virtual environments, backup systems, and server migration.

  • Client infrastructure management
  • WordPress infrastructure and dedicated hosting
  • Virtual environments and backup systems
  • Endpoint firewall configuration
  • Server migration and performance optimization
  • Infrastructure lifecycle management
LinuxWordPressHostingVirtualizationNetworkingFirewall

IT & Engineering Project Coordinator

PVR Projects Limited · Full-time · Pune, India

Mar 2004 – Oct 2006

Project tracking, timeline coordination, budget alignment, and cross-functional coordination with internal project tracking systems.

  • Project tracking and timeline coordination
  • Budget alignment and cross-functional coordination
  • Internal project tracking systems management
Project ManagementCoordinationTracking Systems

Linux Systems & Help Desk Infrastructure Engineer

EPIC - NIC · Full-time · Nellore, India

Jun 2002 – Feb 2004

Linux administration, Windows/macOS support, enterprise client systems, hosting servers, and network infrastructure hardening.

  • Linux administration and Windows/macOS support
  • Enterprise client systems and hosting servers
  • Hardware and network troubleshooting
  • Print servers, OS configuration, and network infrastructure hardening
LinuxWindowsmacOSNetworkingHardwareServer Administration

Additional Experience

Fleet Logistics & Delivery Operations

Swiggy Instamart · Full-time · India

Jan 2017 – Jan 2019

Fleet logistics and delivery operations management.

  • Fleet logistics coordination
  • Delivery operations management

Warehouse Operations & Inventory Coordinator

Nellore Marketing Private Limited · Full-time · India

Jan 2000 – Jan 2002

Warehouse operations and inventory coordination.

  • Warehouse operations management
  • Inventory coordination

Information Management & Data Processing Clerk

Hotline Computers · Full-time · India

Jan 1999 – Jan 2000

Information management and data processing.

  • Information management
  • Data processing

Selected Projects

VulnDesk

Security Tooling · in-progress

Vulnerability management and security automation platform for researchers

TypeScriptReactNode.jsPostgreSQLDockerSecurity APIs

Security Research

Platforms

YesWeHackHackerOneBugcrowd

Research Areas

Web Application SecurityAPI SecurityAuthenticationAuthorizationAccess ControlBusiness LogicXSSSQL InjectionCSRFInformation DisclosureVulnerability ValidationReconnaissanceSecurity AutomationAttack Surface Mapping

Methodology

  1. 1.Reconnaissance: Passive and active information gathering to understand the target landscape
  2. 2.Attack Surface Mapping: Systematic identification and cataloging of all potential entry points
  3. 3.Discovery: Targeted vulnerability discovery using automated and manual techniques
  4. 4.Validation: Rigorous proof-of-concept development and impact verification
  5. 5.Impact Analysis: Technical and business impact assessment with CVSS scoring
  6. 6.Responsible Disclosure: Coordinated reporting through authorized channels with reproduction steps
  7. 7.Remediation Guidance: Architectural recommendations and mitigation strategies for developers

Education

Krishna Memorial School

Secondary School Education — General

1990 – 1995 · India

Additional Training

Web/Multimedia Management & Advanced Webmaster Architectures

Udemy · 2020 – 2020

Digital Systems Communication & Cross-Media Engineering

Udemy · 2019 – 2020

Languages

English: Professional Working ProficiencyTelugu: NativeHindi: Fluent