Tashi Tsering - Cybersecurity Portfolio

I specialize in, • Penetration Testing - Web Application & Network Security Assessment. • Vulnerability Assessment - OWASP Top 10 & Security Auditing. • Risk Management - ISO/IEC 27005 & Threat Analysis. • Incident Response - Fraud Detection & Security Operations. • Security Automation - Python & Bash Scripting for Security Tasks. Certifications, • PJPT - Practical Junior Penetration Tester (Certified). • PNPT - Practical Network Penetration Tester (In Progress - Jan 2026). • CompTIA Linux+ - Linux System Administration (In Progress). • Meta iOS Developer - Professional Certificate. • Version Control (Meta) - Git & GitHub Fundamentals. Tools & Technologies, • Penetration Testing - Metasploit, Nmap, Burp Suite, Nessus, Wireshark. • Operating Systems - Kali Linux, Rocky Linux, Ubuntu, Windows 11, Mac OS. • Scripting & Programming - Python, Bash, Swift, Java. • Security Tools - John the Ripper, Aircrack-ng, SQLmap, Active Directory. • SIEM & Monitoring - Splunk, Data Visualization & Log Analysis. • Business Tools - SAP, Tableau, UiPath, MS CRM, Excel.

Recent Projects, • Web Application Penetration Testing - OWASP Juice Shop security assessment. • Network Penetration Testing - Nmap scanning & enumeration of local networks. • Password Cracking - Hash cracking with John the Ripper. • Honeypot Deployment with Cowrie - SSH/Telnet honeypot with Splunk monitoring. • SQL Injection on DVWA - Exploiting & securing database vulnerabilities. • Kioptrix Level 1 (VulnHub) - Root access via Apache exploitation & privilege escalation. • ISRM Project - Okta Inc. - Information Security Risk Management capstone project. Professional Experience, • Financial Analyst - Hewlett-Packard, Bangalore (March 2019 - Sept 2023) • Managed financial data using SAP, Excel, and analytics tools • Streamlined workflows & enhanced operational efficiency • Handled cross-border transactions & vendor management Job Simulations & Training, • Commonwealth Bank Cybersecurity - Fraud detection, Splunk dashboards, incident response (Sept 2025). • Deloitte Australia Cyber - Log analysis, breach response, suspicious activity detection (Sept 2025). Education, • Master of Cyber Security - RMIT University, Melbourne (2025) • Master of Computer Science - St. Joseph's University, Bangalore • Bachelor of Computer Application - IGNOU, Bangalore

command         alias           parameters              description
-------         -----           ----------              -----------
about           (abt)           [no parameters]         read more about me
projects        (prj)           [no parameters]         showcase my security projects  
contact         (con)           [no parameters]         find out ways to contact me
certifications  (cert)          [no parameters]         display my security certifications
skills          (sk)            [keywords]              show technical skills and tools
tools           (tl)            [category]              list cybersecurity tools by category
writeups        (wu)            [platform]              show CTF writeups and challenges
github          (git)           [repo]                  access GitHub repositories
linkedin        (lin)           [no parameters]         professional social profile
resume          (cv)            [format]                download resume (pdf/txt)
more            (m)             -                       get more results
clear           (c)             -                       clear the screen
help            (h,?)           [command]               displays help text

cd              -               [directory]             change working directory
ls              -               [path]                  list directory contents
cat             -               [file]                  display file contents
nmap            -               [target]                network discovery and security auditing
metasploit      (msf)           [module]                penetration testing framework
john            (jtr)           [hashfile]              password cracking tool
sqlmap          (sql)           [url]                   automatic SQL injection testing
burpsuite       (burp)          [proxy]                 web application security testing