$ whoami

Prasun Ray_

Security Analyst & CEH

FOCUS

SOC Analyst

BASED IN

Kolkata, IN

STACK

Py · Java

STATUS

available

01 / ABOUT

Notes from a security analyst.

I'm a security analyst with a focus on threat detection, log analysis, and building intelligent security automation.

My work centers on integrating machine learning into defensive pipelines to parse telemetry, isolate anomalies, and accelerate incident response.

To keep my edge sharp, I actively play CTFs with a focus on reverse engineering and forensics. Outside of production, I write about custom tool builds, vulnerability reproductions, and the mental models I use when auditing code.

$ cat skills.txt

APPLICATION SECURITY THREAT MODELING LOG ANALYSIS INCIDENT RESPONSE MACHINE LEARNING CLOUD SECURITY (AWS / GCP) PYTHON JAVA LINUX INTERNALS REVERSE ENGINEERING DIGITAL FORENSICS

02 / EDUCATION

Formal training & certifications.

# degree

2022 — 2026

B.Tech in Computer Science & Engineering

Maulana Abul Kalam Azad University of Technology

↗ verify

# certifications

2026

Certified Ethical Hacker v13

EC-Council

↗ verify

2024

Google Cybersecurity Professional Certificate V2

Coursera

↗ verify

2024

Google AI Essentials V1

Coursera

↗ verify
$ view all certificates ↗

04 / PROJECTS

Tools I've built and shipped.

Small, focused projects — mostly Python — solving problems I actually hit at work.

01

nfm-hyb

PYTHON TENSORFLOW STREAMLIT

A hybrid Deep Learning (BiLSTM) and statistical (ARIMA) stock forecasting system enhanced by Neutrosophic Logic. Features an interactive dashboard and a robust backend API.

02

web-application-firewall

PYTHON MACHINE LEARNING FLASK

ML-based WAF using feature extraction and classification to detect malicious HTTP requests in real-time via a proxy server.

03

aes+lsb steganography

PYTHON CRYPTOGRAPHY OPENCV

Layered privacy tool — encrypts data with AES-256 before embedding it into images via LSB encoding. IBM EDUNET SkillBuild Internship project.

04

writeups.md

GO MARKDOWN HUGO

The static-site generator powering this portfolio's blog — minimal, monospaced, and Markdown-only.

$ view more on github ↗

05 / CONTACT

Say hi.

Status 200: I actually read everything that hits my inbox.

$ cat contact.txt

prasunray477@gmail.com

Kolkata, India

⭳ download resume

06 / WRITEUPS

Blogs.

AUG 14, 2025 · 9 min

Chaining an SSRF into RCE via internal metadata

SSRF AWS

JUN 02, 2025 · 12 min

Prototype pollution in the wild: three real-world variants

JAVASCRIPT APPSEC