United States

Security Engineering

Bachelor’s Degree

Shubham Khichi

Founder & CEO

Problem-solving

Critical-thinking

Team player

Organisation skills

Conflict resolution

Leadership

Analytical skills

AI/ML

ChatGPT

Grab a cold one and enjoy a relaxed security-focused podcast with my co-host Sunny, where we interview and discuss important topics with top-notch professionals in the cyber community. 

Listen to the podcast on Spotify - https://open.spotify.com/show/57oHl7fMPrawp3CDFpn3M4

Responsible for building a top-notch Red Team program from the ground up at Solarwinds, all the way from hiring, managing, and training a team of highly skilled operators to run phishing campaigns, using state-of-the-art technical, social TTP (Tactics, Techniques, and Procedures), pen testing and identifying risk in a vast range of our IT products to lead, the world’s largest IT company spread across 5 continents and serving more than 300,000 customers including nearly all Fortune 500 companies and numerous federal agencies, to glide into the ever-growing offensive cyber world with a breeze. 

We created innovative Rules of Engagement which enabled constant, multi-threaded adversarial pressure to prepare the business to respond to real adversaries while balancing the needs of our Blue Team peers. We enforced the industry-pioneering Secure-By-Design methodology in our red team methodology to create purple team tests which challenged the SW infrastructure to be more secure.

•Created awesome cybersecurity videos ranging from offensive Red Team engagements to Blue Team arsenal setup.

• Live on Twitch - https://www.twitch.tv/infosecbro
• Available on Youtube - https://www.youtube.com/channel/UCOwltphUp6OgdkTK6DEKryg
• Document Blogs at - https://cyber.shubhamkhichi.com/

• Promoted to Full-time employment after a successful tenure as a help desk specialist.

• Gathered data through interviewing Supply Chain managers from 98 industries, analyzed the data, calculated the results through the PLS-SEM method, which includes exploratory factor analysis, and contributed it to the research. 

• Gained valuable experience in data collection, exploring the possible expansion of research ideas, different methods in analyzing data, conducting an academic literature review and idea development, making practical inferences from the analysis results.

• Acquired precious experience on how to finalize a research project and make the final draft of a research paper that meets the intended journal criteria for submission.

• Experienced in using XSS, CSRF, IDOR, Access control, SQL Injection Attacks, etc, and also on how to mitigate such attacks so that the company can protect their websites from malicious attacks.

• Analyzed and reverse engineered famous ransomware and malware to identify what exactly the exploit does and how big is business impact.

• Proficient in complex security-related testing, creating test cases, performing manual and automated tests, reporting on problems encountered, and documenting test results for follow-up.

• Experienced in web proxy tools such as BrupSuite Pro to analyze website code and find vulnerabilities in web apps and/or authentication protocols. 

• Demonstrated advanced knowledge of exploit development and modifying exploits to exfiltrate systems/sandboxes.

• Delivered high-quality Proof of Concept of how a system can get exploited with a particular vulnerability in web applications, in a very easy-to-understand report for all IT audiences.

• Proficient in privilege escalation via exploiting OS vulnerabilities in both Linux and Windows.

• Knowledgeable in the Cyber Kill Chain model as well as the OSWAP Top-10 framework.

• Experienced in exploiting Linux and Windows OS.

NEXUS Infosec L.L.C., a premier provider of red team services in the United States and abroad, is known for providing complete penetration testing, ethical hacking, and red team services. We specialize in these fields for private and public organizations, helping them to protect their information systems against outside threats by providing real-world threat scenarios that are designed to be replicable. We have extensive experience with Red Teaming and penetration testing, including infrastructure and products. 

Our team comprises highly skilled professionals with diverse backgrounds and offensive certifications to uncover risks within your environment. We pride ourselves on establishing solid relationships with our clients and care about every detail regarding their security needs. Your infrastructure is unique, and we want to ensure that the remediation plan is tailored to your needs. We do not offer generic fixes but instead build a custom plan just for you.

• Promoted to team captain within 20 months of employment based on leadership and management skills as a Data Analyst at UTArlington.

• Devised training material for a diverse team of 15 highly skilled employees.

• Analyzed the strengths and weaknesses of employees and delegated tasks enhancing their leadership.

• Undertook various projects about the university admission growth and executed with incredible detail, in a time-bound manner.

• Understood and listened to the needs and requirements of the team and came up with effective solutions.

• Promoted to Regional Marketing Intern within 5 months of employment based on the leadership skills as a Mozilla University Ambassador

• Executing successful marketing campaigns in various universities in the United States.

• Enhanced recruiting and interviewing skills by hiring students on board with Mozilla Firefox

• Targeted both offline and online consumers by designing a multi-pronged marketing strategy.

Shubham Khichi🇺🇸