SECURITY PORTFOLIO BLUE TEAM / PURPLE TEAM

Ayush Kumar Patel.

// SOC Analyst | Purple Team
Detection Engineering & Incident Response

Investigating threats, building detections and connecting attacker techniques to defender visibility. My portfolio brings together security certifications, practical labs and documented technical projects.

Black and white portrait of Ayush Kumar Patel
AKAyush Kumar PatelSOC • Detection • Purple Team
[ 25.3176° N · 82.9739° E ]VARANASI / IN
Varanasi, Uttar Pradesh, India
SCROLL TO EXPLORE ↓
98/100TryHackMe capability
SAL1TryHackMe certified
10THM learning paths
204 daysHighest THM streak · profile snapshot
01 / CERTIFICATIONS FIRST

Certifications & credentials.

Evidence of learning, in one place. Credential cards link to my public listings; issuer-verified badge links can be opened from the connected profiles when available.

See all on LinkedIn
The five course certificates are listed on LinkedIn; SAL1 is shown in my supplied TryHackMe profile. For independent issuer verification, open the relevant public badge or certificate on Credly, Google Skills, TryHackMe or the issuer. Profile snapshots may change.
02 / TOOLKIT

Tools I'm learning & using.

Tools used across documented SOC, Blue Team and Purple Team practice. A focused toolkit—not an inflated list of software proficiencies.

SPLSplunk / SPLSIEM search & triage
WZWazuhEndpoint monitoring
ΣSigma / ELKDetection engineering
WSWiresharkNetwork investigation
PYPythonSecurity automation
>_LinuxSecurity operations
03 / SELECTED WORK

Projects with proof.

Hands-on evidence for SOC, incident response, cloud security, phishing investigation and security engineering. Every project opens its real GitHub repository.

All repositories
CLOUDSENTINEL / RISK VIEW
09rules
FINDINGS BY PRIORITY
01 / CLOUD SECURITY FEATURED

CloudSentinel

A local-first AWS security posture and CloudTrail analysis platform with nine documented detection rules, risk scoring and findings lifecycle tracking.

AWSPythonStreamlit
Explore case study
PHISHMATRIX / THREAT TRIAGE
https://suspicious-domain.exampleANALYZING
IOC CORRELATION
02 / THREAT INTELLIGENCE FEATURED

PhishMatrix

A phishing investigation workbench combining threat-intelligence lookups, risk signals and structured defensive analysis workflows.

FastAPIOSINTPython
Explore case study
03 / SOC & DFIR

Advanced SOC & Threat Detection

Documented labs covering detection engineering, Sigma rules, memory forensics, ELK and incident-response workflows.

SigmaELKVolatility 3
View repository
04 / PHISHING ANALYSIS

PhishShield Next

A defensive phishing triage workbench for suspicious URLs, email messages and HTML evidence with explainable findings.

FastAPIPhishingReporting
View repository
05 / CLOUD INCIDENT RESPONSE

Data Breach Response & BCDR

A Google Cloud security capstone exploring findings, containment, recovery and infrastructure hardening.

Google CloudIncident Response
View repository
06 / APPLICATION SECURITY

Web Vulnerability Scanner

A Flask-based scanning project that explores web input vectors, common security issues and assessment reporting.

FlaskPythonOWASP
View repository

04 / PRACTICE

Hands-on practice. Real progress.

TryHackMe and Hack The Box are central to how I develop security skills. The TryHackMe statistics below are a dated snapshot supplied from my account, not live counters.

THM_PROFILE SNAPSHOT · NOV 2026
Kshatantra Diamond · highest league

Hands-on SOC, threat investigation, AI security, offensive security and cloud-defense learning.

98Capability score
10Paths completed
204Highest streak
SAL1Certified
SOC Level 1 & 2AI SecurityDefending AWSDevSecOpsSecurity Engineer
View TryHackMe profile
HTB_PRACTICE PLATFORM
Hack The Box Public profile

Technical security labs and investigations across attack techniques, systems, networks and defensive analysis. Explore my public activity at the source.

Hands-on security labs
Attacker / defender understanding
Continuous technical practice
View Hack The Box profile

TryHackMe profile also showed 109 questions answered this week, Top 1% ranking and 13,437 yearly activity events when shared. These are historical profile figures, not automatically updating metrics.

ALSO DOCUMENTEDElevate Labs cybersecurity practiceTask write-ups covering network scanning, phishing analysis, vulnerability assessment and traffic inspection.
Read task documentation
05 / ABOUT ME

A defender’s mindset.
Driven by practice.

I’m Ayush Kumar Patel, based in Varanasi, India. My work focuses on Security Operations, Purple Team workflows, log analysis, threat detection and incident response. I build practical projects and document what I learn through real training platforms.

My portfolio connects hands-on detection engineering, phishing investigation, cloud security, memory forensics and incident-analysis exercises. These are documented labs and personal projects, not claims of full-time industry employment.

CURRENT EDUCATIONBachelor of Computer Applications (BCA)Manipal University Jaipur · 2025–2028 (as listed on LinkedIn)
06 / CONTACT

Let's build something
more secure.

Open to SOC Analyst, Security Analyst, Threat Detection, Purple Team and Incident Response opportunities, internships and technical collaborations. I’d be glad to connect.

Send an email
DIRECT CONTACT
ayushcyberdef@gmail.com

Varanasi, Uttar Pradesh, India