Rajat Srivastava
CYBER SECURITY ENGINEER · VAPT SPECIALIST

RAJAT
SRIVASTAVA

CERT-UK  ·  ITDA  ·  GOVT. OF UTTARAKHAND
> 

Security-focused penetration tester with 6+ years of hands-on VAPT experience across government and private sectors. Currently securing Uttarakhand's critical state infrastructure as Infra Auditor at CERT-UK. Previously at IIT Kanpur's C3i Hub. Responsibly disclosed vulnerabilities to the U.S. Department of Defense.

View Experience Get In Touch
Scroll
01 // Profile

Who I Am

I'm a Cyber Security Engineer & Infra Auditor currently at CERT-UK (ITDA, Government of Uttarakhand) — Uttarakhand's state-level cyber incident response team. I specialize in end-to-end VAPT across web applications, APIs, mobile apps, SDC infrastructure, and mission-critical government systems.

Previously a Security Engineer Grade I at C3i Hub, IIT Kanpur for 3 years, I executed VAPT for major government projects (IPA, NHAI, Solar Group) and delivered military-grade application hardening for Army projects under Prof. Sandeep Shukla.

I've identified and responsibly disclosed vulnerabilities to the U.S. Department of Defense and multiple high-profile organizations globally. An active speaker at national-level Government of India cybersecurity conferences including events at Vigyan Bhawan, New Delhi, and state-level AI & tech summits.

6+
Years in Security
GOV
Critical Infra Audits
DoD
CVE Disclosures
IIT
Research Background
02 // Arsenal

Technical Skills

Penetration Testing
Web Applications API Security Thick Client Network Devices Android Cloud Security Infrastructure SDC Audits
Security Tools
Burp Suite Pro Nessus Metasploit Wireshark Nmap GVM / OpenVAS SQLMap Nikto Gobuster Docker Linux
Domain Expertise
Vuln Management Exploit Development Security Audits Cyber Forensics App Hardening APT Threat Intel PoC Development AI in Cybersecurity
Soft Skills
Critical Thinking Team Collaboration Task Prioritization Communication Stakeholder Liaison Report Writing
03 // Timeline

Work History

CERT-UK  ·  ITDA  ·  Govt. of Uttarakhand
Jun 2025  – PRESENT
Infra Auditor
// Dehradun, Uttarakhand
  • End-to-end penetration testing on web applications, APIs, mobile apps, and network infrastructure for state-critical systems
  • Comprehensive audits of SDC infrastructure: servers, firewalls, IDS/IPS, and virtualization platforms
  • Infrastructure audits for Police Department networks, Corbett Tiger Reserve, and Char Dham Yatra digital services
  • Automated vulnerability scanning, PoC capture, and reporting using Burp Suite Pro, Nessus, and custom scripts
  • Security audits of the eGate Pass System used across Uttarakhand for accessing sensitive government locations
  • Collaborated with law enforcement, IT teams, and state officials to secure citizen-facing services and sensitive assets
C3i Hub  ·  IIT Kanpur
Jun 2022 – May 2025
Security Engineer Grade I
// Kanpur, Uttar Pradesh
  • VAPT on government projects for IPA, NHAI, and Solar Group across web apps, APIs, and network infrastructure
  • Identified and mitigated critical vulnerabilities, APT threats, and cyber terrorism risks
  • Onsite cyber audits with RCE, SQL Injection, XSS, and Privilege Escalation mitigations across internal networks
  • Military-grade application hardening for Army projects under Prof. Sandeep Shukla (IITK)
  • Executed projects in thick client architecture, API, Cloud & Android security testing
Bulwark Cyber-X
Jan 2020 – Jun 2020
Jr. Information Security Consultant
// Jaipur, Rajasthan
  • Hands-on Web and App Penetration Testing engagements
  • Security audits to identify, document, and report vulnerabilities
Auraiya Cyber Cell  ·  Govt. of India
Jan 2019 – Feb 2019
Cyber Security Intern
// Auraiya, Uttar Pradesh
  • Multi-crore fraud investigation with I.P.S. Prof. Triveni Singh (UP Police)
  • In-depth knowledge of Cyber Forensics, Cyber Laws & Cyber Policing
Kratikal Pvt. Ltd
Jun 2018 – Dec 2018
VAPT Internship
// Noida, Uttar Pradesh
  • Real-time VAPT training for Web Applications, Web Servers & Network devices
04 // Credentials

Certs & Achievements

◈
eWPTX v2.0
// INE Security · Web Advanced Exploitation
◈
CEH v13
// EC-Council · Certified Ethical Hacker
◈
Practical Ethical Hacking
// TCM Security
◈
Certified Network Security Specialist
// ICSI UK
★
U.S. Dept. of Defense — Bug Bounty
// Responsible Disclosure · Hall of Fame
★
Multi-Organisation Vuln Disclosures
// High-Profile Organizations Worldwide
05 // Field

Conferences & Speaking

Uttarakhand AI Impact Summit 2025
OCT 2025
National Summit · Speaker
Uttarakhand AI Impact Summit 2025
Hotel Ramada, Dehradun  ·  Digital India / MeitY / INDIAai
Making Cities Cyber Secure
NATIONAL
National Conference · New Delhi
Making Cities Cyber Secure
Vigyan Bhawan, Hall 6, New Delhi  ·  Govt. of India · Smart City Mission
Cybersecurity Workshop
OCT 2025
Workshop & Training
Cybersecurity Awareness Session
Government / Institutional Engagement
Security Seminar
AUG 2025
Research Seminar
Advanced VAPT Methodologies
Presented on Penetration Testing Frameworks & Threat Intelligence
06 // Education

Academic Background

2015 — 2019
B.Tech — Electronics & Communication Engineering
PSIT Kanpur (Pranveer Singh Institute of Technology)
// Kanpur, India  ·  Aug 2015 – Jul 2019
07 // Connect

Get In Touch

Open to penetration testing engagements, critical infrastructure audits, government cybersecurity contracts, and conference speaking invitations. Let's build a safer digital India.

@ rajatsri1411@gmail.com EMAIL # +91 90445 10566 PHONE in linkedin.com/in/srivastava-rajat LINKEDIN ◎ Dehradun, Uttarakhand · India LOCATION
$ whois rajat-srivastava
> Resolving target... [200 OK]

name : Rajat Srivastava
role : Cyber Security Engineer · Infra Auditor
org : CERT-UK · ITDA · Govt. Uttarakhand
prev : C3i Hub · IIT Kanpur (3 yrs)
loc : Dehradun, Uttarakhand, IN
exp : 6+ years offensive security
certs : eWPTX · CEH v13 · PEH · CNSS
hall : U.S. DoD Bug Bounty · HoF

status: ▶ AVAILABLE FOR ENGAGEMENTS
$